| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Win 10 : WLAN-USB-Sticks nicht migriert - WLAN-Verbindung kann kurz etabliert werden, bricht dann wieder abWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
04.01.2026, 13:12
| #1 |
| |  Win 10 : WLAN-USB-Sticks nicht migriert - WLAN-Verbindung kann kurz etabliert werden, bricht dann wieder ab Hallo liebe Virenjäger, das Problem (nicht auf meinem PC) äußert sich wie folgt, hier der zeitliche Ablauf in Kurzform: 1. Realtek WLAN-Stick funktionierte plötzlich nicht mehr 2. Gerätemanager: Gerät funktioniert, aber in den Ereignissen "nicht migriert" 3. Im Gerätemanager deinstallieren (inkl. Treiber): keine Besserung 4. Windows Update: seit 07/2024 keine Updates mehr gefahren. Updates nachgeholt (Netzwerk per USB-Tethering problemlos möglich) 5. Diverse unnütze Tools (CCleaner, "PC-schneller-macher", etc.) entfernt 6. SFC /SCANNOW: Einige Probleme entfernt, keine Besserung 7. BIOS Update (um eine Version), keine Besserung 8. Alternativen WLAN-Stick (UGreen) ohne mein Beisein installiert, funktioniert nicht. 9. Finde neuen WLAN-Stick als Memory-Stick im Gerätemanager (??). Wieder Ereignismeldung "nicht migriert" 10. Im Gerätemanager deinstallert, Treiber heruntergeladen, über Treibersetup neu installiert 11. Wieder Ereignismeldung "nicht migriert" 12. WLAN-Verbindungsaufbau (Netzwerk sehen und auswählen, Paßwort eingeben, verbinden) dennoch erfolgreich (??) 13. Nach ca. 30 sec WLAN-Verbindung wieder weg (schlechtes Signal ausgeschlossen, Rechner steht 3m neben Fritzbox). Erneuter Aufbau nicht erfolgreich. 14. FRST ausgeführt, Logs siehe unten (FRST.txt in diesem Beitrag, Addition.txt im nächsten) 15. SFC /SCANNOW : keine Integritätsverletzungen Bei Punkt 13 begann ich mich zu fragen ob hier ein Virenbefall vorliegt. Windows Defender zeigt keine Probleme an. Es war auf dem Rechner mal ein Avira Antivir, wurde entfernt. FRST.txt: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20-11-2025
durchgeführt von Horst (Administrator) auf DESKTOP-7PAH99J (Gigabyte Technology Co., Ltd. Q170M-D3H) (04-01-2026 12:00:17)
Gestartet von B:\SIK Handy Papa 2024-10-26\EINLADUNGEN - ERREIGNISSE\Downloads\scoped_dir9560_2142170738\FRST64.exe
Geladene Profile: Horst
Plattform: Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser nicht gefunden!
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe
(C:\Program Files\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Program Files\Opera\125.0.5729.49\opera_crashreporter.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2587.9.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.96\msedgewebview2.exe <6>
(DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxEM.exe
(explorer.exe ->) (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH) C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck_Broker.exe
(explorer.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> WhatsApp.Root) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2587.9.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msdt.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Program Files\Opera\opera.exe <29>
(Geek Software GmbH -> geek software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(PrintCtrl.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe <2>
(services.exe ->) () [Datei ist nicht signiert] C:\Windows\System32\atwtusb.exe <2>
(services.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (AIC Semiconductor (Shanghai) Co., Ltd. -> AIC Semiconductor) C:\Program Files\Ugreen\AicWifiService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\IntelCpHeciSvc.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\sdiagnhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [PrintDisp] => C:\WINDOWS\system32\PrintDisp.exe [595080 2019-03-21] (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [MacrokeyManager] => C:\WINDOWS\system32\WTMKM.exe [7329792 2011-06-01] () [Datei ist nicht signiert]
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [10752424 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18381792 2017-06-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1690368 2022-07-22] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [LogiBolt] => C:\Program Files\Logi\LogiBolt\LogiBolt.exe [22423104 2021-12-14] (Logitech Inc -> Logitech)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Ashampoo Backup] => "C:\Program Files\Ashampoo\Ashampoo Backup 2023\bin\backupClient-ab.exe" --hidden (Keine Datei)
HKLM\...\Run: [Ashampoo Backup PB] => C:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\backupClient-abpb.exe [955240 2023-12-05] (Ashampoo GmbH & Co. KG -> )
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [455968 2023-05-25] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Run: [PDF24] => B:\Programme\PDF24\pdf24.exe [669920 2025-06-23] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [PDF24] => C:\Program Files (x86)\PDF24\pdf24.exe [576224 2025-09-15] (Geek Software GmbH -> geek software GmbH)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ACHTUNG
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ACHTUNG
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ACHTUNG
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [] => [X]
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIPGE.EXE [417776 2014-11-14] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIPGE.EXE [417776 2014-11-14] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45741280 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [LogiBolt] => C:\Program Files\Logi\LogiBolt\LogiBolt.exe [22423104 2021-12-14] (Logitech Inc -> Logitech)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [MicrosoftEdgeAutoLaunch_6E2C73815817D7E02B41C013F4C55849] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4228688 2025-12-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [Opera Stable] => C:\Program Files\Opera\opera.exe [2088408 2025-12-22] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [QMxNetworkSync] => C:\Program Files\Common Files\MAGIX Services\Update Notifier\QMxNetworkSync.exe [1027600 2023-05-22] (MAGIX Software GmbH -> MAGIX)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [Spotify] => C:\Users\Horst\AppData\Roaming\Spotify\Spotify.exe [35433288 2025-03-11] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [com.doctolib.pro.desktop] => C:\Program Files\Doctolib\Doctolib.exe [180509488 2024-07-26] (Doctolib SAS -> Doctolib)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [OpenOffice Updater] => C:\Users\Horst\AppData\Roaming\OpenOffice Updater\Updater.exe [367480 2021-07-28] (Arne Koenig -> ) <==== ACHTUNG
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\MountPoints2: {bcec7c50-56f3-11ed-b1c9-806e6f6e6963} - "E:\Adobe CS6\Set-up.exe"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Winlogon: [Shell] C:\WINDOWS\explorer.exe [6089584 2025-12-22] (Microsoft Windows -> Microsoft Corporation) <==== ACHTUNG
HKLM\...\Windows x64\Print Processors\ActMaskR: C:\Windows\System32\spool\prtprocs\x64\ActPrint.dll [51848 2018-09-14] (ActMask Group Co., Ltd -> ActMask Co.,Ltd)
HKLM\...\Windows x64\Print Processors\hpcpp103: C:\Windows\System32\spool\prtprocs\x64\hpcpp103.dll [323584 2010-10-13] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP560 series: CNMLMA0.DLL (Keine Datei)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [336896 2009-04-03] (CANON INC.) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\EPSON XP-960 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBPGE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\EverDoc: C:\WINDOWS\system32\mfilemon.dll [972000 2016-02-17] (Open Source Developer, Lorenzo Monti -> Monti Lorenzo)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2025-11-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\143.0.7499.170\Installer\chrmstp.exe [2025-12-27] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\StartRLCMS.lnk [2021-02-24]
ShortcutTarget: StartRLCMS.lnk -> C:\ProgramData\Reallusion\RLRunUtility.exe (Reallusion Inc. -> )
BootExecute: autocheck autochk * bddel.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1A6AE2FB-C6E6-4320-B8E8-576D227C9E04} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {DB83630F-E04C-4DF1-AE07-E3A08F471FC4} - \FreeDownloadManagerNetworkMonitor -> Keine Datei <==== ACHTUNG
Task: {097F5BEC-6A24-448D-9255-3E9963341D8A} - System32\Tasks\{0882A554-C370-450E-BEA8-6C820776BEBB} => C:\Windows\System32\pcalua.exe [91136 2025-12-22] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files (x86)\Adobe\Acrobat8\Adobe Acrobat 8 Professional\instmsia.exe" -d "C:\Program Files (x86)\Adobe\Acrobat8\Adobe Acrobat 8 Professional"
Task: {45566E1D-9E2B-447E-A4FB-E0D8D0621779} - System32\Tasks\{379498D6-842E-44B9-B87D-06A708419469} => C:\Windows\System32\pcalua.exe [91136 2025-12-22] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Users\Horst\Downloads\APRO23_Win_ESD1_WWEFG.exe -d C:\Users\Horst\Downloads
Task: {0BE90A69-C33D-4C38-BC7D-B5EAAD27F8EA} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-7PAH99J-Horst => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {B42EDF9F-F32D-4E30-AB6F-E88CF0059F44} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [10752424 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {51F44CB4-2023-475C-824D-5EF6D42DB0C2} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [11065256 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {C012D1EB-A351-4A91-9F2C-223A0C7161D6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {9ECC77DF-A90B-4E1B-80F7-188C8390619F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {F6BF46C4-BD43-4B41-B6E1-E74D89F5E48F} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "1e4c18f7-3906-405b-934e-816f7137dc7f" --version "6.38.0.11537" --silent
Task: {10C01E53-9628-4F59-BF0D-DB4A6EDC2FFF} - System32\Tasks\CCleanerSkipUAC - Horst => C:\Program Files\CCleaner\CCleaner.exe [39575776 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {64700C20-8F60-44B1-9E1C-39DFA6998F45} - System32\Tasks\EPSON XP-960 Series Update {EEA69949-4F01-4179-8AA6-3B8FC338600E} => C:\Windows\System32\spool\drivers\x64\3\E_YTSPGE.EXE [690536 2013-11-21] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Task: {762A5246-5556-4A8B-8132-59E4094E6897} - System32\Tasks\GMX Update => C:\Users\Horst\AppData\Local\1&1 Mail & Media GmbH\MCDS\1\Application\1\GMX_Update.exe [1467320 2021-04-20] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Task: {39F54204-4FFC-47CE-B968-0767A9B1F565} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.4{355534B7-F9CB-4F05-BD58-1FB49FEFDA4B} => C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.4\updater.exe [7056536 2025-12-08] (Google LLC -> Google LLC)
Task: {27DC19EB-2DF5-4D25-86F6-7E86BE21A2BF} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [11507504 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {648224D2-F2DA-4A4E-A0D4-8D912799CB57} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28946240 2025-12-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {8D455488-DB27-4886-A3FC-AE58ED370DB8} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\opushutil.exe [61728 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {4E7B3555-3E08-4099-B317-E7C1D5E2F872} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28946240 2025-12-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {53EE5140-04B4-4E25-A03C-E7EE18C1B621} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [230656 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {2BCB6923-EF1D-470C-A1DC-58AE21358096} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [230656 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {DD687DA7-3338-47B0-AFB9-C92B69375374} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [11507504 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {056825A5-328E-4D1B-B2F8-90D6829A7625} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AED84AFC-3C29-45E4-9661-30840D456B83} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {12FE138F-7FA7-4B0B-AE93-267ACD897969} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D7D2FE94-5B8C-491F-802E-7779303B0223} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9080701E-47AE-4DA5-B0A2-9573112709ED} - System32\Tasks\NCH Software\MixPadUpdateCheck => C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe [10931200 2025-11-24] (NCH Software, Inc. -> NCH Software)
Task: {EA7B1BAB-3A10-44FF-90BD-6E5A748C770B} - System32\Tasks\NCH Software\SwitchUpdateCheck => C:\Program Files (x86)\NCH Software\Switch\switch.exe [6256632 2025-12-15] (NCH Software, Inc. -> NCH Software)
Task: {383E2531-81BA-4AC7-ADBB-972DB9E5E125} - System32\Tasks\NCH Software\VideoPadCacheDeleteAll => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [15140336 2025-10-10] (NCH Software, Inc. -> NCH Software)
Task: {2A7777B1-2F10-4196-BE3F-E3737F79F729} - System32\Tasks\NCH Software\VideoPadUpdateCheck => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [15140336 2025-10-10] (NCH Software, Inc. -> NCH Software)
Task: {773D90A8-88DE-4D2E-A88E-2C5E55B51A6E} - System32\Tasks\NCH Software\WavePadUpdateCheck => C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe [10205680 2025-12-02] (NCH Software, Inc. -> NCH Software)
Task: {4C34F98E-6AB6-4B42-9880-53F5AFF56214} - System32\Tasks\Opera scheduled assistant Autoupdate 1582821198 => C:\Program Files\Opera\autoupdate\opera_autoupdate.exe [6233560 2025-12-18] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Program Files\Opera\assistant" --producttype=assistant $(Arg0)
Task: {BCD66482-BDC6-488D-8561-BCFF63B89F24} - System32\Tasks\Opera scheduled Autoupdate 1505550991 => C:\Program Files\Opera\autoupdate\opera_autoupdate.exe [6233560 2025-12-18] (Opera Norway AS -> Opera Software)
Task: {2B4826E9-83F0-4EEC-AD6E-B060778107CC} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5751664 2017-05-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {5C6012C4-50A8-48BA-8941-26B0122BE354} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [6191000 2017-05-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {7970172B-21BC-4F02-AFBC-2E844D497B48} - System32\Tasks\SEO => C:\Users\Horst\AppData\Roaming\SEO\SEO.exe (Keine Datei) <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\EPSON XP-960 Series Update {EEA69949-4F01-4179-8AA6-3B8FC338600E}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSPGE.EXE:/EXE:{EEA69949-4F01-4179-8AA6-3B8FC338600E} /F:UpdateWORKGROUP\DESKTOP-7PAH99J$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ACHTUNG (Beschränkung - Zones)
Tcpip\Parameters: [DhcpNameServer] 192.168.68.204
Tcpip\..\Interfaces\{426751f0-7da5-4fc1-9ed5-96f93f71afc4}: [DhcpNameServer] 192.168.68.204
Tcpip\..\Interfaces\{81597995-380e-4483-8ef9-4e2404d531b7}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{81597995-380e-4483-8ef9-4e2404d531b7}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{a8743275-c269-41a2-b64f-63cba816211a}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{a8743275-c269-41a2-b64f-63cba816211a}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{a8743275-c269-41a2-b64f-63cba816211a}\35F657E6462416273556475707F563335493: [DhcpNameServer] 10.10.10.254
Tcpip\..\Interfaces\{c94ac666-3758-47d9-8756-47598b969e9e}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{c94ac666-3758-47d9-8756-47598b969e9e}: [DhcpDomain] fritz.box
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <==== ACHTUNG
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default [2026-01-04]
Edge DownloadDir: Default -> G:\Downloads
Edge Notifications: Default -> hxxps://de.softonic.com; hxxps://web.whatsapp.com; hxxps://www.chip.de; hxxps://www.computerbild.de; hxxps://www.facebook.com; hxxps://www.mein-schoener-garten.de; hxxps://www.tah.de; hxxps://www.youtube.com
Edge HomePage: Default -> hxxps://
Edge Extension: (Avira Safe Shopping) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\caiblelclndcckfafdaggpephhgfpoip [2025-12-27]
Edge Extension: (Avira Password Manager) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\emgfgdclgfeldebanedpihppahgngnle [2025-03-21]
Edge Extension: (Coole Cursor für Chrome ) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\empjidjbllcmlgaobahepkijkfmfkjdb [2023-07-30]
Edge Extension: (SFL) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\epoipicdijmpedfdkjamnjfgodfjojad [2024-10-05]
Edge Extension: (Google Docs Offline) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-12-20]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2025-12-12]
Edge Extension: (Edge relevant text changes) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge Extension: (The Mist) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\npkohagpnckpnhenpjeeggdngjphfgkn [2025-08-26]
Edge Profile: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2025-11-21]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2019-10-23] [] [ist nicht signiert]
FF Plugin: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-01-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-01-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2024-12-12] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corporation -> Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\Program Files (x86)\Common Files\Nero\BrowserPlugin\npBrowserPlugin.dll [2011-07-26] (Nero AG -> Nero AG)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2024-12-12] (Adobe Inc. -> Adobe Systems)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default [2025-12-14]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR HomePage: Default -> hxxps://
CHR StartupUrls: Default -> "hxxps://"
CHR DefaultSearchURL: Default -> hxxps://search-io.com/search?iid=34f25b56-3e5a-4ebe-8e4b-0f07b728f16b&src=chrome&q={searchTerms}
CHR DefaultSearchKeyword: Default -> chromesearch
CHR DefaultNewTabURL: Default -> hxxps://activelysearching.com
CHR DefaultSuggestURL: Default -> hxxp://api.bing.com/osjson.aspx?query={searchTerms}
CHR Extension: (Avira Password Manager) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2025-04-18]
CHR Extension: (Avira Safe Shopping) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2025-11-13]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-12-12]
CHR Extension: (Coole Cursor für Chrome ) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\empjidjbllcmlgaobahepkijkfmfkjdb [2024-01-01]
CHR Extension: (SFL) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\epoipicdijmpedfdkjamnjfgodfjojad [2024-10-06]
CHR Extension: (Google Docs Offline) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-11-13]
CHR Extension: (Saferduck) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjdjgnojiionckfmaobhcgeahdndmhgf [2021-08-02]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2025-12-12]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-07]
CHR HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\opera.exe
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft, Inc. -> ArcSoft Inc.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2017-09-26] (Adobe Systems) [Datei ist nicht signiert]
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944048 2024-12-12] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [11081128 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AicWifiServiceD80; C:\Program Files\Ugreen\AicWifiService.exe [35352 2024-03-21] (AIC Semiconductor (Shanghai) Co., Ltd. -> AIC Semiconductor)
S3 ashbackuppb; c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\backupService-abpb.exe [39272 2023-12-05] (Ashampoo GmbH & Co. KG -> )
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13419408 2025-12-16] (Microsoft Corporation -> Microsoft Corporation)
S3 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2018-02-16] (Digital Wave Ltd -> Digital Wave Ltd.)
S3 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe [133736 2025-08-27] (Intel Corporation -> Intel)
S3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAUpdateService.exe [133224 2025-08-27] (Intel Corporation -> Intel)
S3 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
S3 GMX_MailCheck_Update; C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck_Update.exe [933784 2022-08-10] (1&1 Mail & Media GmbH -> Pixality Computersysteme GmbH)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2025-12-29] (HP Inc. -> HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-13] (Macrovision Corporation) [Datei ist nicht signiert]
S4 Lightkey Service; C:\Program Files (x86)\Lightkey Sources LTD\Lightkey\LightkeyCentralService.exe [134288 2021-08-15] (LIGHTKEY SOURCES LTD -> LIGHTKEY SOURCES LTD)
S4 LightkeyNeural; C:\Program Files (x86)\Lightkey Sources LTD\Lightkey\LightkeyNeuralService.exe [43648272 2021-08-15] (LIGHTKEY SOURCES LTD -> )
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe [2063376 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 NeroBackItUpBackgroundService; C:\Program Files (x86)\Nero\Nero 2017\Nero BackItUp\NBService.exe [287088 2016-08-09] (Nero AG -> Nero AG)
S3 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [Datei ist nicht signiert]
R2 OptionsPlusUpdaterService; C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe [18135808 2023-11-15] (Logitech Inc -> Logitech, Inc.)
S3 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [576224 2025-09-15] (Geek Software GmbH -> geek software GmbH)
S3 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [Datei ist nicht signiert]
S3 RLHostService; C:\Program Files (x86)\Common Files\Reallusion\RLHostService\RLHostService.exe [280072 2021-02-25] (Reallusion Inc. -> Reallusion.Inc)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe [4426832 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe [290704 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WTService; C:\WINDOWS\system32\atwtusb.exe [916992 2011-04-27] () [Datei ist nicht signiert]
S3 LibreOfficeMaintenance; "B:\Program Files\LibreOffice\program\update_service.exe" [X]
S4 RunSwUSB; C:\Windows\runSW.exe [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 aicloadfw; C:\WINDOWS\System32\drivers\aicloadfw.sys [1060984 2024-05-08] (AIC Semiconductor (Shanghai) Co., Ltd. -> )
R3 aicusbwifi; C:\WINDOWS\System32\drivers\aicusbwifi.sys [1219688 2024-05-13] (AIC Semiconductor (Shanghai) Co., Ltd. -> )
R1 cdrbsdrv; C:\Windows\System32\Drivers\cdrbsdrv.sys [39208 2006-08-25] (B.H.A Corporation -> B.H.A Corporation)
S3 cpuz161; C:\ProgramData\CPUID Software\cpu-z\KICxMQHHatRI [44680 2025-12-22] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [175824 2024-10-17] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps)
S3 DroidCamVideo; C:\WINDOWS\System32\drivers\droidcamvideo.sys [33768 2020-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d.inf_amd64_7e337195b92a35b6\e1d.sys [611936 2023-08-31] (Intel Corporation -> Intel Corporation)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-03-14] (Martin Malik - REALiX -> REALiX(tm))
R3 int0800; C:\WINDOWS\System32\drivers\flashud.sys [79624 2022-01-25] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333192 2025-12-22] (Microsoft Windows -> Microsoft Corporation)
S3 MirayVirtualDisk; C:\WINDOWS\System32\drivers\mvdo.sys [405200 2022-10-14] (Miray Software AG -> Miray)
S3 mmrv-abpb; C:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\mmrv-abpb.sys [59424 2023-12-05] (Ashampoo GmbH & Co. KG -> )
R3 moufiltr; C:\WINDOWS\System32\drivers\moufiltr.sys [7680 2009-03-08] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
S3 NewAudioTechnologySpatialSoundCard; C:\WINDOWS\System32\drivers\vacnatkd.sys [114008 2020-06-15] (New Audio Technology GmbH -> NEW AUDIO TECHNOLOGY)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2019-07-16] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 PCWinSoft; C:\WINDOWS\System32\drivers\scrcamnetdriver_x64.sys [241800 2012-10-12] (PCWinSoft Systems Informatica Ltda -> Windows (R) Server 2003 DDK provider)
R0 PxHlpa64; C:\WINDOWS\System32\drivers\PxHlpa64.sys [56336 2013-10-16] (Corel Corporation -> Corel Corporation)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12423864 2025-08-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174264 2024-10-17] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 vhidmini; C:\WINDOWS\System32\drivers\walvhid.sys [7552 2009-08-26] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21928 2025-12-22] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [635272 2025-12-22] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102792 2025-12-22] (Microsoft Windows -> Microsoft Corporation)
U3 aswbdisk; kein ImagePath
U1 avgbdisk; kein ImagePath
U3 dmwappushsvc; kein ImagePath
S3 MpKsl508b8475; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
S3 MpKsl621d7010; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
S3 MpKsl7b9fff18; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
S3 MpKsle9233a68; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Drei Monate (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-01-04 11:59 - 2026-01-04 12:01 - 000000000 ____D C:\FRST
2026-01-04 11:57 - 2026-01-04 11:57 - 000003326 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2026-01-04 11:57 - 2026-01-04 11:57 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2026-01-04 11:13 - 2026-01-04 11:15 - 544383370 _____ C:\Users\Horst\Documents\registry 2026-01-04.reg
2026-01-04 10:49 - 2026-01-04 11:58 - 000004944 _____ C:\WINDOWS\AicWifiServiceLog.txt
2026-01-04 10:49 - 2026-01-04 10:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ugreen
2026-01-04 10:49 - 2026-01-04 10:49 - 000000000 ____D C:\Program Files\Ugreen
2026-01-04 10:49 - 2024-05-13 06:05 - 001219688 _____ C:\WINDOWS\system32\Drivers\aicusbwifi.sys
2026-01-04 10:49 - 2024-05-08 03:42 - 001060984 _____ C:\WINDOWS\system32\Drivers\aicloadfw.sys
2026-01-04 10:48 - 2024-11-29 06:51 - 000000000 ____D C:\Users\Horst\Desktop\CM762_Driver_V1.2
2025-12-30 17:39 - 2025-12-30 17:39 - 000000000 ____D C:\Users\Horst\Desktop\2012_06_16 - Goldene Hochzeit Waltraud und Wilfried in Alten´s Ruh´, Wunstorf__ Sicherheitskopie in FOTO_Laufwerk Z
2025-12-29 15:49 - 2026-01-02 20:35 - 000000000 ____D C:\Users\Horst\Desktop\Urlaub Eifel
2025-12-27 20:34 - 2025-12-27 20:38 - 000000000 ___HD C:\$WinREAgent
2025-12-23 21:55 - 2025-12-23 21:55 - 000500736 _____ (Realtek) C:\WINDOWS\SwUSB.exe
2025-12-23 21:55 - 2025-12-23 21:55 - 000044760 _____ () C:\WINDOWS\runSW umbenannt.exe
2025-12-23 21:43 - 2025-12-23 21:43 - 000000000 ____D C:\Program Files (x86)\Cisco
2025-12-23 21:37 - 2025-12-23 21:37 - 000003542 _____ C:\WINDOWS\system32\Tasks\SEO
2025-12-23 20:48 - 2025-12-23 20:48 - 000000887 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2025-12-23 20:48 - 2025-12-23 20:48 - 000000000 ____D C:\Users\Horst\AppData\Local\VS Revo Group
2025-12-22 23:20 - 2025-12-22 23:20 - 000000000 ____D C:\Users\Horst\Desktop\mb_bios_ga-q170m-d3h_f23d
2025-12-22 23:11 - 2025-12-22 23:11 - 000000884 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2025-12-22 23:11 - 2025-12-22 23:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2025-12-22 23:11 - 2025-12-22 23:11 - 000000000 ____D C:\ProgramData\CPUID Software
2025-12-22 23:11 - 2025-12-22 23:11 - 000000000 ____D C:\Program Files\CPUID
2025-12-22 22:35 - 2025-12-22 22:35 - 000000000 ____D C:\inetpub
2025-12-22 22:20 - 2025-12-22 22:20 - 000023734 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-12-22 22:17 - 2025-12-22 22:17 - 000023734 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-12-22 21:57 - 2024-10-17 03:54 - 000174264 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2025-12-22 21:51 - 2024-10-17 03:53 - 000175824 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2025-12-22 21:43 - 2025-12-22 21:43 - 000004006 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1505550991
2025-12-22 21:43 - 2025-12-22 21:43 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2025-12-22 19:38 - 2025-12-23 18:28 - 005616792 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-12-21 14:33 - 2025-12-21 14:33 - 000000000 ____D C:\Users\Horst\.openjfx
2025-12-21 14:33 - 2025-12-21 14:33 - 000000000 ____D C:\Users\Horst\.deepartcreator
2025-12-21 14:29 - 2025-12-18 12:31 - 000001513 _____ C:\Users\Horst\Desktop\Aktivierungsanleitung.txt
2025-12-21 14:27 - 2025-12-21 14:28 - 393076295 _____ C:\Users\Horst\Downloads\CHIP_-_DeepArt_Creator (2).zip
2025-12-21 14:26 - 2025-12-21 14:27 - 393076295 _____ C:\Users\Horst\Downloads\CHIP_-_DeepArt_Creator.zip
2025-12-21 14:25 - 2025-12-21 14:26 - 005235880 _____ (BurdaForward GmbH) C:\Users\Horst\Documents\Vollversion_ Deep Art Creator - KI-Bildgenerator - CHIP Installer _35vFv.exe
2025-12-19 19:24 - 2025-12-19 19:27 - 000000000 ____D C:\Users\Horst\Desktop\VIDEOBEARBEITUNG MUSIK - RECORDER - SOUNDBEARBEITUNG
2025-12-18 20:52 - 2025-12-18 20:52 - 000000039 _____ C:\Users\Horst\AppData\Local\kritadisplayrc
2025-12-18 12:19 - 2025-12-18 12:19 - 005235880 _____ (BurdaForward GmbH) C:\Users\Horst\Documents\Vollversion_ BeckerCAD 12 3D - CHIP Installer _fhw6v.exe
2025-12-18 11:18 - 2025-12-18 11:18 - 000000000 ____D C:\Users\Horst\Documents\VideoPad Projekte
2025-12-17 19:06 - 2025-12-17 19:06 - 000001373 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video-Editor.lnk
2025-12-17 19:06 - 2025-12-17 19:06 - 000001347 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Switch Audio-Converter.lnk
2025-12-17 19:05 - 2025-12-17 19:05 - 000001415 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn Disc-Brennprogramm.lnk
2025-12-17 19:05 - 2025-12-17 19:05 - 000001357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MixPad Musikstudio-Software.lnk
2025-12-17 19:05 - 2025-12-17 19:05 - 000000000 ____D C:\Users\Horst\Documents\Mixpad Projects
2025-12-17 19:04 - 2025-12-17 19:04 - 000001353 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk
2025-12-17 18:59 - 2025-12-17 18:59 - 000001233 _____ C:\Users\Public\Desktop\MyKeyFinder.lnk
2025-12-17 18:59 - 2025-12-17 18:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyKeyFinder
2025-12-17 18:59 - 2025-12-17 18:59 - 000000000 ____D C:\Program Files (x86)\MyKeyFinder
2025-12-17 18:53 - 2026-01-02 23:32 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Ashampoo Snap 16
2025-12-17 18:00 - 2025-12-18 21:50 - 000000000 ____D C:\Users\Horst\HDR Projects 9 Pro
2025-12-17 17:52 - 2025-12-17 17:53 - 227531339 _____ C:\Users\Horst\Downloads\CHIP-Ashampoo_Snap_16.zip
2025-12-17 17:47 - 2025-12-17 17:48 - 008688680 _____ (Abelssoft ) C:\Users\Horst\Documents\MyKeyFinder_setup.exe
2025-12-17 17:36 - 2025-12-17 17:36 - 029255160 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Horst\Documents\ashampoo_winoptimizer_27_47122.exe
2025-12-16 15:04 - 2025-12-16 15:04 - 001262796 _____ C:\Users\Horst\Downloads\CHIP_Ascomp_Backup_Maker.zip
2025-12-16 15:02 - 2025-12-16 15:02 - 005235880 _____ (BurdaForward GmbH) C:\Users\Horst\Documents\Vollversion_ Backup Maker Professional - CHIP Installer _hEj6v.exe
2025-12-15 23:23 - 2025-12-15 23:23 - 000000000 ____D C:\Users\Horst\Desktop\IMG_20241214_214816_DRO.sharpendata
2025-12-15 22:36 - 2025-12-15 22:37 - 378915001 _____ C:\Users\Horst\Downloads\3-in1-Paket_fuer_Schwarz-Weiss-Fotografie (2).zip
2025-12-15 22:10 - 2025-12-15 22:10 - 000001474 _____ C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WO27.lnk
2025-12-15 22:05 - 2025-12-15 22:05 - 000000000 ____D C:\WINDOWS\SysWOW64\Translation
2025-12-15 22:05 - 2025-12-15 22:05 - 000000000 ____D C:\WINDOWS\SysWOW64\data
2025-12-15 19:43 - 2025-12-15 22:44 - 000000000 ____D C:\Users\Horst\BlackWhite Projects 6 Pro
2025-12-15 19:36 - 2025-12-15 19:37 - 378915001 _____ C:\Users\Horst\Downloads\3-in1-Paket_fuer_Schwarz-Weiss-Fotografie.zip
2025-12-15 19:27 - 2025-12-15 19:53 - 000000000 ____D C:\Users\Horst\AppData\Roaming\neroaiu
2025-12-15 19:27 - 2025-12-15 19:27 - 000000000 ____D C:\Users\Horst\Documents\NeroAIU
2025-12-15 19:16 - 2025-12-15 19:16 - 000000000 ____D C:\WINDOWS\nsxCDF2.tmp
2025-12-15 19:15 - 2025-12-15 19:35 - 000000000 ____D C:\Users\Horst\AppData\Roaming\nerostart
2025-12-15 19:12 - 2025-12-15 19:13 - 165313141 _____ C:\Users\Horst\Downloads\CHIP_Nero_AI_Image_Upscaler_Pro (2).zip
2025-12-15 19:10 - 2025-12-15 19:11 - 165313141 _____ C:\Users\Horst\Downloads\CHIP_Nero_AI_Image_Upscaler_Pro.zip
2025-12-15 19:06 - 2025-12-15 19:06 - 016754854 _____ C:\Users\Horst\Downloads\CHIP_Wise_Care_365 (2).zip
2025-12-15 13:24 - 2025-12-15 13:24 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Wise Utilities
2025-12-14 22:57 - 2025-12-23 21:15 - 000000004 ___SH C:\WINDOWS\wisefs.dat
2025-12-12 11:26 - 2025-12-12 11:26 - 000002134 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audials Vision SE 2026.lnk
2025-12-12 11:21 - 2025-12-12 11:21 - 006762626 _____ C:\Users\Horst\Downloads\CHIP_Audials_Vision_2026_SE (3).zip
2025-12-12 11:17 - 2025-12-12 11:17 - 006762626 _____ C:\Users\Horst\Downloads\CHIP_Audials_Vision_2026_SE (2).zip
2025-12-12 11:13 - 2025-12-12 11:13 - 006762626 _____ C:\Users\Horst\Downloads\CHIP_Audials_Vision_2026_SE.zip
2025-12-12 11:11 - 2025-12-12 11:11 - 005235880 _____ (BurdaForward GmbH) C:\Users\Horst\Documents\Vollversion_ Audials Vision 2026 SE - CHIP Installer _pderv.exe
2025-12-12 10:19 - 2025-12-15 19:16 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2025-12-06 20:12 - 2025-12-06 20:12 - 000000000 ____D C:\Users\Horst\.ms-ad
2025-12-05 22:37 - 2025-12-05 22:37 - 001860782 _____ C:\Users\Horst\Documents\NIK-ColorEfex.pdf
2025-12-02 14:15 - 2025-12-02 14:15 - 000000000 ____D C:\Plugins SHARPEN #5 professional
2025-12-02 14:14 - 2025-12-02 14:15 - 000000000 ____D C:\Anleitungsvideos
2025-12-01 20:43 - 2025-12-01 20:43 - 000000000 ____D C:\Users\Horst\.fop
2025-11-29 11:27 - 2025-11-29 11:27 - 000000000 ____D C:\Users\Horst\AppData\Roaming\com.example
2025-11-29 11:23 - 2025-11-29 11:23 - 025196296 _____ (WinZip Computing) C:\Users\Horst\Documents\winzip77-bing.exe
2025-11-28 19:37 - 2025-11-28 19:38 - 005235880 _____ (BurdaForward GmbH) C:\Users\Horst\Documents\7-Zip (64 Bit) - CHIP Installer _suDJv.exe
2025-11-26 17:34 - 2025-11-26 17:34 - 000000000 ____D C:\WINDOWS\SysWOW64\Sfxs
2025-11-26 17:34 - 2025-11-26 17:34 - 000000000 ____D C:\WINDOWS\SysWOW64\lang
2025-11-26 17:34 - 2025-11-26 17:34 - 000000000 ____D C:\WINDOWS\SysWOW64\Icons
2025-11-26 17:34 - 2025-11-26 17:34 - 000000000 ____D C:\WINDOWS\SysWOW64\HELP
2025-11-23 23:14 - 2026-01-02 20:04 - 000000000 ____D C:\Users\Horst\Desktop\BILDBEARBEITUNG - CAT - PRESETS - HINTERGRÜNDE
2025-11-23 20:48 - 2025-12-18 19:41 - 000000000 ____D C:\Users\Horst\Sharpen 5 Pro
2025-11-22 19:44 - 2025-11-22 19:44 - 000000000 ____D C:\WINDOWS\nstEAB2.tmp
2025-11-21 19:55 - 2025-11-21 19:55 - 002566832 _____ C:\Users\Horst\Documents\FreeImage_23-04-25.zip
2025-11-21 18:25 - 2025-11-21 18:27 - 000000000 ____D C:\Users\Horst\Desktop\2017 Weihnachten
2025-11-20 21:14 - 2025-11-20 21:44 - 1152595296 _____ C:\Users\Horst\Documents\LUT-1_professional_Video-Anleitung.zip
2025-11-20 20:24 - 2025-11-20 20:23 - 006588086 _____ C:\Users\Horst\Documents\SHARPEN projects professional - Handbuch.pdf
2025-11-16 20:03 - 2025-11-16 20:03 - 000000000 ____D C:\Users\Horst\Documents\makehuman
2025-11-15 16:11 - 2025-12-20 23:39 - 000000000 ____D C:\Users\Horst\Desktop\Wartung
2025-11-14 21:31 - 2025-11-14 21:31 - 000004214 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1582821198
2025-11-14 15:28 - 2025-11-14 15:28 - 213710989 _____ C:\Users\Horst\Documents\70-Free-Overlays-Download-by-Fotoworkshop-Stuttgart-de.zip
2025-11-13 21:55 - 2025-12-31 13:35 - 000000000 ____D C:\Users\Horst\Desktop\2015-25-12 - Heiligabend__Sicherheitskopie in Laufwerk SIKO Foto (Z)
2025-11-13 21:55 - 2025-11-13 21:59 - 000000000 ____D C:\Users\Horst\Desktop\2015-23-07 - Ballonflug - Datensicherung in Laufwerk SIKO Foto (Z)
2025-11-11 21:35 - 2025-11-11 21:35 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoZoom Pro 9
2025-11-11 21:35 - 2025-11-11 21:35 - 000000000 ____D C:\Program Files\PhotoZoom Pro 9
2025-11-11 21:03 - 2025-11-11 21:03 - 000097970 _____ C:\Users\Horst\Documents\franzis.de_checkout_finish_sUniqueID_90X17340YY668854P.pdf
2025-11-11 20:30 - 2025-11-11 20:33 - 559563662 _____ C:\Users\Horst\Documents\31607-3_SHARPEN-projects-5-professional_winde.zip
2025-11-08 21:22 - 2025-11-08 21:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2025-11-08 21:20 - 2025-11-08 21:22 - 000000000 ____D C:\Program Files (x86)\PDF24
2025-11-06 12:33 - 2025-11-06 12:33 - 000001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CS2.lnk
2025-11-04 22:18 - 2025-11-04 22:23 - 000012705 _____ C:\Users\Horst\P1070679_80_81_82_83_84_85.neatProject
2025-11-04 22:18 - 2025-11-04 22:23 - 000000000 ____D C:\Users\Horst\P1070679_80_81_82_83_84_85.neatdata
2025-11-04 22:14 - 2025-11-04 22:14 - 000003409 _____ C:\Users\Horst\Meine Farb-Ebenen.cml
2025-10-30 19:15 - 2025-10-30 19:15 - 000024660 _____ C:\Users\Horst\Documents\pastor-juergen-**********-20251029-140445.pdf
2025-10-29 22:38 - 2025-10-29 22:40 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2025-10-29 19:13 - 2025-10-29 19:12 - 000369631 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_12h43m37s (1).pdf
2025-10-29 19:13 - 2025-10-29 19:12 - 000346536 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_12h17m48s (1).pdf
2025-10-29 19:13 - 2025-10-29 19:12 - 000204195 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_18h27m15s (1).pdf
2025-10-29 18:38 - 2025-10-29 18:36 - 000369631 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_12h43m37s.pdf
2025-10-29 18:38 - 2025-10-29 18:36 - 000346536 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_12h17m48s.pdf
2025-10-29 18:38 - 2025-10-29 18:36 - 000204195 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_18h27m15s.pdf
2025-10-29 18:34 - 2025-10-29 18:33 - 000346536 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_ - Citycare24- 12h17m48s.pdf
2025-10-29 18:09 - 2025-10-29 18:09 - 000329024 _____ C:\Users\Horst\Documents\Ashampoo_Snap_Mittwoch, 29. Oktober 2025_12h43m37s.tif
2025-10-29 11:19 - 2025-10-29 11:19 - 000000000 ____D C:\WINDOWS\nsqDED5.tmp
2025-10-28 22:34 - 2025-10-28 22:34 - 000000000 ____D C:\Program Files (x86)\LibreOffice Maintenance Service
2025-10-28 20:59 - 2025-10-28 20:59 - 011965080 _____ (WiseCleaner.com ) C:\Users\Horst\Documents\WDRSetup_6.2.2.520.exe
2025-10-24 11:26 - 2025-10-24 11:26 - 000000000 ____D C:\WINDOWS\nsv5D78.tmp
2025-10-23 21:15 - 2025-10-23 21:15 - 000000000 ____D C:\Users\Horst\Documents\Adobe Scripts
2025-10-23 20:40 - 2025-11-20 11:08 - 000000000 ____D C:\Users\Horst\ProjectData
2025-10-21 14:53 - 2025-10-21 14:53 - 000000000 ____D C:\ProgramData\MuseHubUpdater
2025-10-16 18:52 - 2025-10-16 18:52 - 000159724 _____ C:\Users\Horst\Documents\Nora001.pdf
2025-10-15 18:11 - 2025-10-15 18:11 - 000002233 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2025-10-14 19:27 - 2025-10-14 19:27 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Avanquest
2025-10-13 21:27 - 2025-10-13 21:27 - 000000000 ____D C:\ProgramData\Avanquest
2025-10-13 21:25 - 2025-10-13 21:26 - 014920672 _____ (Avanquest Software) C:\Users\Horst\Documents\inPixioPhotoStudio12Installer.exe
==================== Drei Monate (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-01-04 12:02 - 2022-10-28 20:19 - 000000000 ____D C:\Users\Horst\AppData\Local\LogiOptionsPlus
2026-01-04 12:00 - 2021-12-17 20:42 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-01-04 12:00 - 2020-09-17 18:06 - 001722792 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-01-04 12:00 - 2019-12-07 15:51 - 000743714 _____ C:\WINDOWS\system32\perfh007.dat
2026-01-04 12:00 - 2019-12-07 15:51 - 000150136 _____ C:\WINDOWS\system32\perfc007.dat
2026-01-04 12:00 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2026-01-04 11:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2026-01-04 11:55 - 2024-01-02 15:42 - 000008192 ___SH C:\DumpStack.log.tmp
2026-01-04 11:55 - 2020-09-17 18:14 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-01-04 11:55 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-01-04 11:55 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-01-04 11:55 - 2017-09-16 09:33 - 000000000 __SHD C:\Users\Horst\IntelGraphicsProfiles
2026-01-04 11:55 - 2017-09-16 09:33 - 000000000 ____D C:\Intel
2026-01-04 11:55 - 2016-07-16 12:47 - 000000227 _____ C:\WINDOWS\win.ini
2026-01-04 11:23 - 2020-09-17 17:54 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-01-04 10:56 - 2020-09-17 17:55 - 000000000 ____D C:\Users\Horst
2026-01-04 10:18 - 2024-07-09 18:27 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2026-01-04 10:18 - 2019-10-03 16:59 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2026-01-03 23:33 - 2017-09-26 18:03 - 000000000 ____D C:\Users\Horst\AppData\Local\Adobe
2026-01-03 15:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\appcompat
2026-01-02 18:19 - 2024-11-26 22:18 - 000000000 ____D C:\Users\Horst\Desktop\NOCH ZUORDNEN
2026-01-02 15:37 - 2018-05-28 14:05 - 000000000 ____D C:\Users\Horst\AppData\Local\D3DSCache
2026-01-01 23:51 - 2022-11-30 12:39 - 000000000 ____D C:\Users\Horst\Color Projects 6 Pro
2025-12-31 22:28 - 2017-12-05 15:17 - 000000000 ____D C:\Users\Horst\AppData\Local\CrashDumps
2025-12-30 12:18 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-12-30 12:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-12-30 12:18 - 2018-07-19 10:05 - 000000000 ____D C:\ProgramData\Packages
2025-12-29 15:16 - 2017-12-06 14:17 - 000000000 ____D C:\Users\Horst\AppData\Local\Packages
2025-12-29 15:15 - 2024-09-04 20:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-12-29 15:15 - 2024-01-20 23:25 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2025-12-28 14:07 - 2024-02-25 23:05 - 000000000 ____D C:\Users\Horst\Desktop\Heizkesel_Puffer_Ausfall_Warttung
2025-12-28 14:04 - 2023-01-14 17:28 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-12-28 13:34 - 2020-05-24 13:32 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-12-28 13:25 - 2020-09-17 18:14 - 000003754 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-12-28 13:25 - 2020-09-17 18:14 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-12-27 22:39 - 2017-09-25 18:58 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-12-27 22:28 - 2020-09-17 18:14 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2025-12-27 21:55 - 2025-08-08 17:57 - 000000000 ____D C:\Users\Horst\Desktop\HAUS UND GARTEN WESTERENDE UND GARTEN BOKELOH__Sicherheitskopie in Laufwerk EXT. (Y)
2025-12-27 20:55 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-12-23 21:43 - 2020-12-03 20:48 - 000000000 ____D C:\Program Files (x86)\Realtek
2025-12-23 21:43 - 2017-09-16 09:23 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2025-12-23 21:25 - 2021-05-25 18:32 - 000000000 ____D C:\Users\Public\Documents\Ashampoo
2025-12-23 21:25 - 2020-02-02 23:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2025-12-23 21:25 - 2020-02-02 23:35 - 000000000 ____D C:\Program Files (x86)\Ashampoo
2025-12-23 21:20 - 2022-07-27 21:23 - 000000000 ____D C:\Program Files (x86)\Wise
2025-12-23 21:10 - 2023-12-19 18:52 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Lavasoft
2025-12-23 21:10 - 2023-12-19 18:52 - 000000000 ____D C:\Users\Horst\AppData\Local\Lavasoft
2025-12-23 20:48 - 2021-12-26 18:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2025-12-23 20:48 - 2021-12-26 18:46 - 000000000 ____D C:\Program Files\Revo Uninstaller
2025-12-23 18:52 - 2017-09-25 19:20 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
2025-12-23 18:47 - 2020-07-09 20:33 - 000000000 ____D C:\Users\Horst\AppData\Roaming\TuneIn
2025-12-23 18:07 - 2025-07-23 20:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice
2025-12-23 18:03 - 2020-09-05 11:21 - 000000000 ____D C:\Program Files\Reallusion
2025-12-23 17:09 - 2020-02-13 22:16 - 000000000 ____D C:\Users\Horst\AppData\Roaming\SoftMaker
2025-12-23 17:08 - 2020-09-12 18:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Faceware
2025-12-23 17:08 - 2020-09-12 18:24 - 000000000 ____D C:\Program Files\Faceware
2025-12-23 17:05 - 2019-11-27 21:14 - 000000000 ____D C:\ProgramData\NCH Software
2025-12-23 17:05 - 2019-11-27 21:14 - 000000000 ____D C:\Program Files (x86)\NCH Software
2025-12-23 17:05 - 2017-10-02 19:42 - 000000000 ____D C:\Users\Horst\AppData\Roaming\NCH Software
2025-12-23 16:56 - 2017-09-26 14:42 - 000000000 ____D C:\ProgramData\Adobe
2025-12-23 16:56 - 2017-09-09 21:34 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Adobe
2025-12-23 16:55 - 2022-07-27 18:20 - 000000000 ____D C:\Users\Horst\AppData\Roaming\com.adobe.dunamis
2025-12-23 16:55 - 2017-09-26 22:18 - 000000000 ____D C:\Program Files\Common Files\Adobe
2025-12-23 16:52 - 2017-09-26 21:15 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2025-12-22 22:55 - 2023-12-13 18:39 - 000000000 ____D C:\Program Files\Common Files\MAGIX Services
2025-12-22 22:35 - 2024-07-23 19:12 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-12-22 22:35 - 2023-12-14 03:56 - 000000000 ____D C:\WINDOWS\InboxApps
2025-12-22 22:35 - 2019-12-07 15:54 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2025-12-22 22:35 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2025-12-22 22:35 - 2019-12-07 15:52 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\USOPrivate
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2025-12-22 22:35 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2025-12-22 22:16 - 2020-09-17 17:57 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-12-22 21:59 - 2023-10-05 15:46 - 000000000 ____D C:\Users\Horst\AppData\Local\Ashampoo Backup
2025-12-22 21:59 - 2017-10-29 10:59 - 000000000 ____D C:\Program Files (x86)\Nero
2025-12-22 21:55 - 2017-09-16 10:07 - 218369424 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-12-22 21:55 - 2017-09-16 10:07 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-12-22 21:53 - 2022-08-17 18:01 - 000000000 ____D C:\Program Files\dotnet
2025-12-22 21:53 - 2017-09-16 09:37 - 000000000 ____D C:\ProgramData\Package Cache
2025-12-22 21:52 - 2025-04-08 19:24 - 000000000 ____D C:\Program Files (x86)\dotnet
2025-12-22 21:52 - 2018-05-28 13:53 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-12-22 21:51 - 2023-05-24 14:32 - 000000000 ____D C:\Program Files\RUXIM
2025-12-22 21:43 - 2017-09-16 09:36 - 000000000 ____D C:\Program Files\Opera
2025-12-22 21:39 - 2020-07-21 18:51 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2025-12-22 20:39 - 2020-07-21 18:51 - 000000000 ____D C:\Users\Horst\AppData\Local\BraveSoftware
2025-12-22 20:38 - 2017-09-16 09:36 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Opera Software
2025-12-22 20:38 - 2017-09-16 09:36 - 000000000 ____D C:\Users\Horst\AppData\Local\Opera Software
2025-12-22 19:24 - 2020-11-05 17:52 - 000000000 ____D C:\Users\Horst\AppData\Local\ElevatedDiagnostics
2025-12-21 21:33 - 2024-09-19 21:42 - 000000000 ____D C:\Users\Horst\Projects Series
2025-12-21 13:17 - 2019-06-22 10:49 - 000000000 ____D C:\ProgramData\Reallusion
2025-12-20 23:38 - 2024-12-27 19:30 - 000000000 ____D C:\Users\Horst\Desktop\SAUERBRATEN
2025-12-19 21:06 - 2020-03-02 19:34 - 000000132 _____ C:\Users\Horst\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2025-12-19 19:45 - 2018-03-22 22:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Franzis
2025-12-19 19:44 - 2021-12-22 20:45 - 000000000 ____D C:\ProgramData\Audials
2025-12-19 19:43 - 2020-02-13 19:00 - 000000000 ____D C:\Program Files\Ashampoo
2025-12-18 20:52 - 2019-10-24 18:05 - 000038066 _____ C:\Users\Horst\AppData\Local\kritarc
2025-12-18 20:52 - 2019-10-24 18:05 - 000000000 ____D C:\Users\Horst\AppData\Roaming\krita
2025-12-18 11:27 - 2017-12-28 22:49 - 000000000 ____D C:\Users\Horst\AppData\LocalLow\Temp
2025-12-17 19:16 - 2023-12-06 19:00 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Ashampoo Snap
2025-12-17 18:59 - 2018-01-22 19:11 - 000000000 ____D C:\Users\Horst\AppData\Local\Abelssoft
2025-12-17 17:58 - 2023-03-08 14:53 - 000000000 ____D C:\Program Files\Franzis
2025-12-16 20:21 - 2018-05-21 09:52 - 000000000 ____D C:\Users\Horst\AppData\Local\PlaceholderTileLogoFolder
2025-12-16 18:30 - 2021-12-22 20:22 - 000000000 ____D C:\Users\Horst\AppData\Roaming\ASCOMP Software
2025-12-16 15:06 - 2020-11-05 18:43 - 000000000 ____D C:\Users\Horst\AppData\Local\Avira
2025-12-16 13:51 - 2023-01-14 17:28 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-12-15 23:48 - 2017-09-25 18:58 - 000000000 ____D C:\Users\Horst\AppData\Local\Google
2025-12-15 22:14 - 2019-12-03 14:55 - 000000000 ____D C:\Users\Horst\AppData\Roaming\dvdcss
2025-12-15 22:14 - 2019-09-30 13:28 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Notepad++
2025-12-15 19:27 - 2017-12-03 23:33 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Nero
2025-12-15 19:27 - 2017-10-29 11:05 - 000000000 ____D C:\ProgramData\Nero
2025-12-14 23:39 - 2024-01-17 18:08 - 000000000 ____D C:\Users\_ashbackuppb_
2025-12-14 22:42 - 2023-04-15 18:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\InPixio
2025-12-14 22:42 - 2020-11-05 19:08 - 000000000 ____D C:\Program Files\CCleaner
2025-12-13 20:31 - 2020-12-01 19:50 - 000000000 ____D C:\Program Files\7-Zip
2025-12-12 15:35 - 2017-10-02 19:41 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Intel
2025-12-12 11:27 - 2021-12-22 20:32 - 000000000 ____D C:\Users\Horst\AppData\Local\Audials
2025-12-12 11:26 - 2023-12-08 18:18 - 000000000 ____D C:\Program Files\Audials
2025-12-05 22:38 - 2024-01-03 18:42 - 000000000 ___HD C:\Users\Horst\.opera
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2020-04-14 21:18 - 2020-04-14 21:20 - 332627677 _____ () C:\Program Files\makehuman-1.1.1-win32.zip
2019-06-24 16:49 - 2017-11-19 12:51 - 000004286 _____ () C:\Program Files (x86)\FalcoGo.ico
2019-06-24 16:49 - 2017-11-19 12:53 - 000000044 _____ () C:\Program Files (x86)\FalcoGo.url
2019-06-24 16:49 - 2016-01-05 12:37 - 000004286 _____ () C:\Program Files (x86)\FalconLine.ico
2019-06-24 16:49 - 2016-01-05 12:25 - 000000047 _____ () C:\Program Files (x86)\FalconLine.url
2019-06-24 16:49 - 2016-12-21 00:39 - 000004286 _____ () C:\Program Files (x86)\FalcoSpace.ico
2019-06-24 16:49 - 2016-12-21 00:36 - 000000047 _____ () C:\Program Files (x86)\FalcoSpace.url
2019-07-07 16:36 - 2019-07-07 16:36 - 007315103 _____ () C:\Program Files (x86)\picturenaut_3_2_1690.zip
2011-01-12 01:00 - 2011-01-12 01:00 - 000146944 _____ () C:\Program Files (x86)\Common Files\dsfFLACDecoder.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000221184 _____ () C:\Program Files (x86)\Common Files\dsfFLACEncoder.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000204800 _____ () C:\Program Files (x86)\Common Files\dsfNativeFLACSource.dll
2012-05-11 13:16 - 2012-05-11 13:16 - 000171520 _____ () C:\Program Files (x86)\Common Files\dsfOggDemux2.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000240128 _____ () C:\Program Files (x86)\Common Files\dsfVorbisDecoder.dll
2009-07-11 22:08 - 2009-07-11 22:08 - 000001860 _____ () C:\Program Files (x86)\Common Files\Microsoft.VC90.CRT.manifest
2011-04-18 21:51 - 2011-04-18 21:51 - 000569680 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\MSVCP90.dll
2011-04-18 21:51 - 2011-04-18 21:51 - 000653136 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\MSVCR90.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000412672 _____ (Google) C:\Program Files (x86)\Common Files\vp8decoder.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000701440 _____ (Google) C:\Program Files (x86)\Common Files\vp8encoder.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000302592 _____ (Google) C:\Program Files (x86)\Common Files\webmmux.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000292352 _____ (Google) C:\Program Files (x86)\Common Files\webmsplit.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000030208 _____ () C:\Program Files (x86)\Common Files\wmpinfo.dll
2022-01-20 17:17 - 2022-01-20 17:17 - 000000246 _____ () C:\Users\Horst\AppData\Roaming\.ptbt1
2018-02-23 23:17 - 2021-11-30 17:09 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-AIFF-Format - Voreinstellungen
2018-02-24 22:58 - 2024-01-22 20:27 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-BMP-Format - Voreinstellungen
2021-01-09 20:05 - 2021-04-05 22:13 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-GIF-Format - Voreinstellungen
2020-03-02 19:34 - 2025-12-19 21:06 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2017-11-08 18:21 - 2024-08-06 18:07 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-Targa-Format - Voreinstellungen
2020-06-11 21:39 - 2020-06-11 21:39 - 001456142 _____ () C:\Users\Horst\AppData\Roaming\AvidLink_Install.log
2020-11-12 20:48 - 2024-10-27 20:01 - 000000632 _____ () C:\Users\Horst\AppData\Roaming\com.cloudapp.windows.plist
2019-10-24 22:10 - 2025-11-24 22:03 - 000000128 _____ () C:\Users\Horst\AppData\Roaming\FotoSketcher.ini
2019-04-05 14:25 - 2019-04-05 14:26 - 000000112 _____ () C:\Users\Horst\AppData\Roaming\main.ini
2019-07-07 16:08 - 2020-06-27 17:41 - 000000009 _____ () C:\Users\Horst\AppData\Roaming\tabbles_hwnd_main
2019-07-07 16:08 - 2020-06-27 17:41 - 000000009 _____ () C:\Users\Horst\AppData\Roaming\tabbles_hwnd_quick_link
2020-05-24 19:15 - 2020-05-24 19:15 - 000018687 _____ () C:\Users\Horst\AppData\Roaming\unins000.dat
2020-05-24 19:15 - 2020-05-24 19:15 - 000013844 _____ () C:\Users\Horst\AppData\Roaming\unins000.msg
2017-11-02 22:54 - 2024-01-11 23:48 - 000001456 _____ () C:\Users\Horst\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2025-12-15 23:48 - 2025-12-15 23:48 - 000111621 _____ () C:\Users\Horst\AppData\Local\dxdiag.log
2025-10-14 20:57 - 2025-12-18 13:06 - 000008180 _____ () C:\Users\Horst\AppData\Local\krita-sysinfo.log
2019-10-24 18:05 - 2025-12-18 20:52 - 000176896 _____ () C:\Users\Horst\AppData\Local\krita.log
2020-07-01 20:54 - 2025-12-18 13:05 - 000051362 _____ () C:\Users\Horst\AppData\Local\kritacrash.log
2025-12-18 20:52 - 2025-12-18 20:52 - 000000039 _____ () C:\Users\Horst\AppData\Local\kritadisplayrc
2019-10-24 18:05 - 2025-12-18 20:52 - 000038066 _____ () C:\Users\Horst\AppData\Local\kritarc
2020-08-06 16:28 - 2020-08-06 16:28 - 000000057 _____ () C:\Users\Horst\AppData\Local\makehuman.conf
2018-10-04 11:18 - 2022-10-28 20:35 - 000000309 _____ () C:\Users\Horst\AppData\Local\oobelibMkey.log
2025-09-16 12:48 - 2025-09-16 12:48 - 000000768 _____ () C:\Users\Horst\AppData\Local\recently-used.xbel
2017-10-01 20:45 - 2020-07-15 20:43 - 000007600 _____ () C:\Users\Horst\AppData\Local\Resmon.ResmonCfg
2022-11-26 18:42 - 2022-12-09 20:24 - 000139264 _____ () C:\Users\Horst\AppData\Local\Tempwd.tmp
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
|
|
04.01.2026, 14:01
| #2 |
| | Win 10 : WLAN-USB-Sticks nicht migriert - Addition.txtCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-11-2025
durchgeführt von Horst (04-01-2026 12:09:30)
Gestartet von B:\SIK Handy Papa 2024-10-26\EINLADUNGEN - ERREIGNISSE\Downloads\scoped_dir9560_2142170738
Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) (2020-09-17 17:14:40)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-947909773-2885354443-2675781160-500 - Administrator - Disabled)
buhso (S-1-5-21-947909773-2885354443-2675781160-1005 - Limited - Disabled)
DefaultAccount (S-1-5-21-947909773-2885354443-2675781160-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-947909773-2885354443-2675781160-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-947909773-2885354443-2675781160-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-947909773-2885354443-2675781160-1003 - Limited - Enabled)
Horst (S-1-5-21-947909773-2885354443-2675781160-1001 - Administrator - Enabled) => C:\Users\Horst
WDAGUtilityAccount (S-1-5-21-947909773-2885354443-2675781160-504 - Limited - Disabled)
_ashbackuppb_ (S-1-5-21-947909773-2885354443-2675781160-1010 - Administrator - Enabled) => C:\Users\_ashbackuppb_
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}
AS: Avira Antivirus (Enabled - Up to date) {33CF8AA2-FA06-4AD4-98AB-332D53DD7FFB}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
100 Photoshop-Aktionen Vol.1 (HKLM-x32\...\100 Photoshop-Aktionen Vol. 1_is1) (Version: - )
100 Photoshop-Aktionen Vol.2 (HKLM-x32\...\100 Photoshop-Aktionen Vol. 2_is1) (Version: - )
4K Video to MP3 (HKLM\...\{8232A6B7-2815-485A-AAF2-10025111DE36}) (Version: 3.0.0.930 - Open Media LLC)
64 Bit HP CIO Components Installer (HKLM\...\{C788B026-20BD-4E96-B698-533F1D6C5013}) (Version: 7.2.4 - Hewlett-Packard) Hidden
7-Zip 25.01 (x64) (HKLM\...\7-Zip) (Version: 25.01 - Igor Pavlov)
AbstractCurves x64 (HKLM\...\AbstractCurves AbstractCurves x64 1) (Version: 1.190 - AbstractCurves Software)
Adobe Bridge 1.0 (HKLM-x32\...\{B74D4E10-6884-0000-0000-000000000101}) (Version: 001.000.001 - Adobe Systems) Hidden
Adobe Bridge 2022 (HKLM-x32\...\KBRG_12_0_2) (Version: 12.0.2 - Adobe Inc.)
Adobe Common File Installer (HKLM-x32\...\{8EDBA74D-0686-4C99-BFDD-F894678E5101}) (Version: 1.00.001 - Adobe System Incorporated) Hidden
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.4.0.361 - Adobe Inc.)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 8.6.0.79 - Adobe Inc.)
Adobe Help Center 1.0 (HKLM-x32\...\{E9787678-119F-4D52-B551-6739B2B22101}) (Version: 1.0.1 - Adobe Systems) Hidden
Adobe Illustrator CS2 (HKLM-x32\...\Adobe Illustrator CS2) (Version: 12.000.000 - Adobe Systems Inc.)
Adobe InDesign CS2 (HKLM-x32\...\Adobe InDesign CS2 - {7F4C8163-F259-49A0-A018-2857A90578BC}) (Version: 004.000.000 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Premiere Rush (HKLM-x32\...\RUSH_2_3) (Version: 2.3 - Adobe Inc.)
Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.4.204 - Adobe Systems, Inc.)
Adobe Stock Photos 1.0 (HKLM-x32\...\{786C5747-0C40-4930-9AFE-113BCE553101}) (Version: 1.0.1 - Adobe Systems) Hidden
Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version: 3.0 - Adobe Systems, Inc.)
Adobe UXP Developer Tool (HKLM-x32\...\UXPD_1_5_0) (Version: 1.5.0 - Adobe Inc.)
AKVIS Coloriage (HKLM\...\{1A751AEE-4021-4611-96D4-EC6FBF119E39}) (Version: 14.0.1492.24452 - AKVIS) Hidden
AKVIS Coloriage (HKLM-x32\...\{c73d6afc-9305-423a-8ee3-e26d6a0af4c2}) (Version: 14.0.1492.24452 - AKVIS)
All Image Downloader (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\{64eac9ac-0b76-44ae-b702-1b8f4a192011}) (Version: 2.0.0 - Imgdownloader)
Amazon Music (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Amazon Amazon Music) (Version: 8.5.0.2261 - Amazon.com Services LLC)
Amazon Photos (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Amazon Photos) (Version: 10.8.0 - Amazon.com, Inc.)
AniMaker Drag (HKLM-x32\...\AniMaker Drag) (Version: 2.1 - AniMaker GmbH)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ArcSoft Scan-n-Stitch Deluxe (HKLM-x32\...\{FF8455A9-21E8-457D-AC64-510A705D53B3}) (Version: 1.1.2.55 - ArcSoft)
Ashampoo Audio Recorder Free (HKLM-x32\...\{91B33C97-C3B3-7A23-56CA-61CA8472B256}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo Backup Pro 17 (HKLM\...\{91B33C97-5909-F165-4B92-42DCE6E18868}_is1) (Version: 17.11 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 2021 (HKLM-x32\...\{91B33C97-87D2-CBDB-6C78-9844D71F4195}_is1) (Version: 1.22.0 - Ashampoo GmbH & Co. KG)
Ashampoo Cover Studio 2017 (HKLM-x32\...\{91B33C97-6D7D-102A-7711-56C011AFB81B}_is1) (Version: 3.0.0 - Ashampoo GmbH & Co. KG)
Ashampoo Home Design 5 (HKLM\...\{6FE137BD-F8A3-4995-B812-04928FFD3D73}_is1) (Version: 5.0.0 - Ashampoo GmbH & Co. KG)
Ashampoo Music Studio 2020 (HKLM-x32\...\{91B33C97-FFD3-62FA-D018-BCB9A3BC574C}_is1) (Version: 1.8.1 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 10 v.10.2.1 (HKLM-x32\...\{C92AB6F1-4B66-808A-D77C-25EF81C0176A}_is1) (Version: 10.2.1 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander Free (HKLM-x32\...\{0A11EA01-CD60-73B5-2FF0-9FCC1502CD64}_is1) (Version: 11.2.0 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer 9 (HKLM\...\{91B33C97-A7B5-2D2D-BC10-085C65109B0D}_is1) (Version: 9.4.7 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Recovery 2 (HKLM\...\{BB339C1F-657A-6D2A-BD02-EF21B6F35991}_is1) (Version: 2.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo Registry Cleaner 2 (HKLM-x32\...\{4209F371-AD80-9E5D-7FD6-99DC6D5D8B7F}_is1) (Version: 2.00.00 - Ashampoo GmbH & Co. KG)
Ashampoo Slideshow Studio 2019 (HKLM-x32\...\{91B33C97-4A4D-A9FD-B59A-1256B60F3665}_is1) (Version: 1.4.0 - Ashampoo GmbH & Co. KG)
Ashampoo Snap 16 (HKLM\...\{0A11EA01-8829-6E65-628A-90709BFA6C2E}_is1) (Version: 16.0.9 - Ashampoo GmbH & Co. KG)
Ashampoo WinOptimizer 27 (HKLM-x32\...\{4209F371-B009-83C0-55A2-B0904D2A6CF6}_is1) (Version: 27.00.05 - Ashampoo GmbH & Co. KG)
Ashampoo ZIP Free (HKLM-x32\...\{0A11EA01-5173-F4C2-0973-35C932D5C674}_is1) (Version: 1.0.7 - Ashampoo GmbH & Co. KG)
Audacity 3.0.2 (HKLM-x32\...\Audacity_is1) (Version: 3.0.2 - Audacity Team)
Audacity 3.7.5 (64 Bit) (HKLM\...\Audacity_is1) (Version: 3.7.5 - Audacity Team)
Audials Vision SE 2026 (HKLM\...\{43349E3F-3B86-4C50-A791-1941558E12EE}) (Version: 26.0.44.0 - Audials AG)
audite! 6.5 (HKLM-x32\...\{F979439C-55CD-41A4-B453-D2F347142DB4}) (Version: 6.5.0 - capella software)
Autodesk SketchBook (HKLM\...\{AE6C5657-8710-4968-BEB5-1E2ED89CB2D2}) (Version: 8.71.0000 - Autodesk)
BenVista PhotoZoom Pro 9.0.2 (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\PhotoZoom Pro 9) (Version: 9.0.2 - BenVista Ltd.)
BLACK WHITE projects 6 professional (64-Bit) (HKLM\...\SILVER_PROJECTS_6_3_28B15F1D_is1) (Version: 6.63 - Franzis Verlag GmbH)
blender (HKLM\...\{7AE80A32-183F-48A8-91A1-B1889B3B6B38}) (Version: 2.93.6 - Blender Foundation)
capella 2008 (HKLM-x32\...\{8D04F5C2-704D-4DB8-84FF-22300783D7F8}) (Version: 6.00.9001 - capella-software)
capella playAlong 3 (HKLM-x32\...\{C9A08B65-CFA7-47E7-A6BD-F54971F51763}) (Version: 3.0 - capella-software)
capella reader 8 (HKLM-x32\...\{d40fe571-3b74-4b1d-9f06-8ea780cfae5f}) (Version: 8 - capella-software AG)
capella-scan 5.0 (HKLM-x32\...\capella-scan 5.0) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 6.38 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.8.1067.0 - Piriform Software) Hidden
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1583.3 - Piriform Software) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CloudApp for Windows (HKLM-x32\...\{5D95CFF5-3601-44D9-94B4-4C4EEA836B51}) (Version: 6.0.0.90 - CloudPlus, Inc.)
CODIJY Colorizer Pro (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\{5a136515-5018-4939-93b3-8ede6788feab}) (Version: 4.2.0 - CODIJY)
COLOR projects 6 professional (64-Bit) (HKLM\...\COLOR_PROJECTS_6_3_C935FDA1_is1) (Version: 6.63 - Franzis Verlag GmbH)
Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{72DB27D3-FE05-4227-AF5A-11CD101ECF09}) (Version: 15.1.0.588 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM-x32\...\{72DB27D3-FE05-4227-AF5A-11CD101ECF09}) (Version: 15.1.588 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Extra Content (HKLM-x32\...\_{5A10CFDA-FA2B-453C-B561-AE864E62EAC8}) (Version: - Corel Corporation)
CorelDRAW Essentials X5 - Extra Content (HKLM-x32\...\{5A10CFDA-FA2B-453C-B561-AE864E62EAC8}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - IPM (HKLM-x32\...\{666D7CED-12E0-4BA3-B594-5681961E7B02}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - WT (HKLM-x32\...\{3B1EF0C5-8855-416F-A6F4-5CC5FCF267CA}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 (HKLM-x32\...\_{EDBEBF07-F880-48FB-9AA5-0E8E71E02D83}) (Version: 15.1.0.588 - Corel Corporation)
CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit (HKLM\...\{46AE421C-BF1B-4B62-BE0E-62FE09C6D5B5}) (Version: 15.1.588 - Corel Corporation) Hidden
CPUID CPU-Z 2.17 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.17 - CPUID, Inc.)
CrazyTalk Animator Standard (HKLM-x32\...\{789567FD-CAA2-4E1C-B38E-9072B3015FFD}) (Version: 1.2.2010.1 - Reallusion Inc.)
CrazyTalk Animator v3.32 PRO (HKLM-x32\...\{6B844167-0760-43FD-BBCA-2463EC967721}) (Version: 3.32.4718.1 - Reallusion Inc.)
Crescendo Notensatz-Editor (HKLM-x32\...\Crescendo) (Version: 10.10 - NCH Software)
CutOut 9 professional (11022020) (HKLM\...\CutOut 9 professional_is1) (Version: 9 - Franzis.de)
darktable (HKLM\...\darktable) (Version: 2.4.1 - the darktable project)
DENOISE projects 3 professional (64-Bit) (HKLM\...\DENOISE_PROJECTS_3_3_FBC348A0_is1) (Version: 3.32 - Franzis Verlag GmbH)
Design & Print (HKLM-x32\...\Design & Print 5.1.0) (Version: 5.1.0 - Avery Zweckform)
Doctolib 2.30.0 (HKLM\...\a23b93d7-c27b-59d6-b1a0-6e4b0d5d056a) (Version: 2.30.0 - Doctolib)
DokuDownloader 2019 (HKLM-x32\...\{28806E83-7109-4E6A-A2C6-B8C43055C59C}_is1) (Version: 1.0 - Abelssoft)
Druckerdeinstallation für EPSON XP-960 Series (HKLM\...\EPSON XP-960 Series) (Version: - Seiko Epson Corporation)
Easy Photo Scan (HKLM-x32\...\{99364024-626C-4BE1-89C8-2F207023497B}) (Version: 1.00.0018 - Seiko Epson Corporation)
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.2 - Seiko Epson Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{7E0261C4-8495-4365-BE48-647701D8B9BD}) (Version: 2.8.3.0 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.50.00 - Seiko Epson Corporation)
Epson Printer Connection Checker (HKLM-x32\...\{DE32F90E-1A29-4D74-BCF1-E7DDB25D713A}) (Version: 3.4.0.0 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{711E8536-AB71-4455-A6C4-357FDBBEBF91}) (Version: 4.6.7 - Seiko Epson Corporation)
EPSON-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.57.0.0 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)
EverDoc 2018 (HKLM-x32\...\{CE690D98-4029-4620-879D-8018BF9CFBEC}_is1) (Version: 3.26 - Abelssoft)
EverDoc Printer++ (64bit) (HKLM\...\{D8156771-98B2-4A23-8122-C904F2410DF1}) (Version: 1.0.0 - Printer++)
Express Burn Disc-Brennprogramm (HKLM-x32\...\ExpressBurn) (Version: 12.01 - NCH Software)
Facebook Desktop (HKLM-x32\...\{844B8965-E5AA-4F9A-A4D4-4E59D4F44F64}) (Version: 0.8.0 - Eric Zhang)
Firebird v2.1 (HKLM-x32\...\Tone2 Firebird_is1) (Version: - Tone2)
FOCUS projects 3 professional (64-Bit) (HKLM\...\FOCUS_PROJECTS_3_3_EDC5B478_is1) (Version: 3.25 - Franzis Verlag GmbH)
Folder Icon Basic (HKLM-x32\...\{EAF4C8EE-4D58-418D-8960-CA9A1628DA77}) (Version: 5.1.0.0 - MSTech Global Ltd) Hidden
FontForge Version 07-11-2020 (HKLM-x32\...\{56748B9C-19AE-4689-B8C5-5A45AE0A993A}_is1) (Version: 07-11-2020 - FontForgeBuilds)
FotoSketcher 3.60 (HKLM\...\{E7C6D565-2E48-4303-A114-AFE7B2E561AF}_is1) (Version: - David THOIRON)
Free FreeCell Solitaire 2017 v3.2 (HKLM-x32\...\Free FreeCell Solitaire_is1) (Version: - TreeCardGames)
Free GIF Maker (HKLM-x32\...\Free GIF Maker_is1) (Version: 1.3.48.831 - Digital Wave Ltd)
Free Notes & Office Ink (HKLM-x32\...\{556F2137-B772-43BB-9A45-E0275234DD16}) (Version: - )
FreeCAD 0.21.1 (HKLM\...\FreeCAD0211) (Version: 0.21.1 - FreeCAD Team)
FreeCAD 1.0.2 (HKLM\...\FreeCAD102) (Version: 1.0.2 - FreeCAD Team)
FreeRIP MP3 Converter 5.7.1.2 (HKLM-x32\...\{501451DE-5808-4599-B544-8BD0915B6B24}_is1) (Version: 5.7.1.2 - GreenTree Applications SRL)
GMX MailCheck für Windows (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar IE8) (Version: 2.7.10.0 - 1&1 Mail & Media GmbH)
GMX Suche (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\1&1 Mail & Media GmbH DS1) (Version: 1.2.0.0 - 1&1 Mail & Media GmbH)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 143.0.7499.170 - Google LLC)
Google Earth Pro (HKLM\...\{8D42B7EA-0BF8-4E13-B646-652FE578F998}) (Version: 7.3.6.10441 - Google)
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.53.3) (Version: 9.53.3 - Artifex Software Inc.)
HD Writer AE 2.1 (HKLM-x32\...\{AC4BDEB4-E06A-4605-B5D2-2FE6750681A5}) (Version: 2.01.141.1031 - Panasonic Corporation)
HDR projects 9 professional (HKLM\...\HDR_PROJECTS_9_3_3BF7CE82_is1) (Version: 9.23 - Franzis Verlag GmbH)
HDR projects photo (64-Bit) (HKLM\...\HDR_PROJECTS_2_1_3BF7CE82_is1) (Version: 2.26 - Franzis Verlag GmbH)
Helm (HKLM\...\{971514BD-7CC3-414F-9258-B79E6D53EC46}) (Version: 0.9.0.0 - Matt Tytel)
High-Definition Video Playback (HKLM-x32\...\{9193490D-5229-4FC4-9BB9-A6D63C09574A}) (Version: 11.0.12200.1.158 - Nero AG) Hidden
Image Composite Editor (HKLM\...\{92AB5708-1AAA-4B1B-A8D5-45CF3AD77519}) (Version: 2.0.3 - Microsoft Corporation)
indii.org/tintii (HKLM-x32\...\tintii) (Version: - )
Inkscape 0.92.4 (HKLM-x32\...\Inkscape) (Version: 0.92.4 - Inkscape Project)
Intel Driver && Support Assistant (HKLM-x32\...\{90EFD4CC-39A4-4470-AEEB-878CB2BCBC81}) (Version: 25.4.36.6 - Intel) Hidden
Intel Driver & Support Assistant (HKLM-x32\...\{4152D055-4116-42A3-BC9E-86D0A17B35A5}) (Version: 25.4.36.6 - Intel)
Java 8 Update 241 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180241F0}) (Version: 8.0.2410.7 - Oracle Corporation)
Krita (x64) 5.2.11 (git a4da714) (HKLM\...\Krita_x64) (Version: 5.2.11.0 - Krita Foundation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Leap Motion Profile v1.0 Trial for Motion LIVE 2D Plug-in (HKLM-x32\...\{CB332079-D416-45F6-9444-A6F651AE663C}) (Version: 1.0.1707.1 - Reallusion Inc.)
LibreCAD (HKLM-x32\...\LibreCAD) (Version: 2.1.3 - LibreCAD Team)
LibreOffice 25.2.5.2 (HKLM\...\{751B7B9A-39A0-428C-963B-0FA2B4BDD27F}) (Version: 25.2.5.2 - The Document Foundation)
Lightkey (HKLM\...\{AB7B36EE-A1FC-42CE-9E9C-ECEF2B2DD2AB}) (Version: 24.0.5.0 - Lightkey Sources LTD) Hidden
Live Billiards 2 (HKLM-x32\...\Live Billiards 2) (Version: - )
LMMS 1.2.1 (HKLM-x32\...\LMMS) (Version: 1.2.1 - LMMS Developers)
Logi Bolt (HKLM\...\LogiBolt) (Version: 1.2.6024.0 - Logi)
Logi Options+ (HKLM\...\{850cdc16-85df-4052-b06e-4e3e9e83c5c6}) (Version: 1.60.495862 - Logitech)
Logitech Options (HKLM\...\LogiOptions) (Version: 9.70.68 - Logitech)
Logitech Unifying-Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech)
LOOXIS Faceworx 1.0 (HKLM-x32\...\LOOXIS Faceworx_is1) (Version: 1.0.0.1 - LOOXIS GmbH)
Luminance HDR 2.5.1 (HKLM\...\{7020FC34-6E04-4858-924D-354B28CB2402}_is1) (Version: - Luminance HDR Dev Team)
Luminance Studio (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Luminance Studio) (Version: - )
Luminar 4 (HKLM\...\Luminar 4) (Version: 4.3.4.9699 - Skylum)
LUT #1 (HKLM\...\LUT_1_2_CCD378F6_is1) (Version: 1.12 - Accelerated Vision UG)
makehuman-community (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\makehuman-community) (Version: 20200727 - Makehuman Community)
MakeMe3D (HKLM-x32\...\{C206BC46-62E0-41CB-0001-4DB984666A77}) (Version: 1.2.12.618 - Engelmann Media GmbH)
MediaHuman Audio Converter Version 1.9.7 (HKLM-x32\...\MHAudioConverter_is1) (Version: 1.9.7 - MediaHuman)
MediBang Paint Pro 24.5.1 (64-bit) (HKLM\...\MediBang Paint Pro_is1) (Version: 24.5.1 - Medibang)
Microsoft Speichern als PDF oder XPS Add-In für 2007 Microsoft Office-Programme (HKLM-x32\...\{90120000-00B2-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft .NET Core Host - 3.1.32 (x64) (HKLM\...\{8A8E3A04-83BC-4CDE-9259-893B666C1AB1}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.32 (x64) (HKLM\...\{ABC6B3C2-1A8D-4C5E-AC16-C2AE44F02743}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.32 (x64) (HKLM\...\{A741B803-3F0E-4684-81EF-FC128D15A92C}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.32 (x64) (HKLM-x32\...\{784973c8-d618-4ac8-97ed-1fd52c5bdf2f}) (Version: 3.1.32.31915 - Microsoft Corporation)
Microsoft .NET Host - 6.0.36 (x64) (HKLM\...\{D6932D97-36F1-40B8-9CDC-CA8365B21000}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.22 (x64) (HKLM\...\{872CDB4B-5DDE-4297-BD19-C93B6C93E386}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.22 (x86) (HKLM-x32\...\{E3308628-44F2-49F2-B618-7735D528FAC2}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.36 (x64) (HKLM\...\{A9E32B25-994B-4856-A12B-0EBED3050410}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.22 (x64) (HKLM\...\{7A046DD7-9D61-4C5D-8F5E-24EE192B1B6A}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.22 (x86) (HKLM-x32\...\{4560BF00-0D8D-4FE8-84BA-83A208E9CB97}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.36 (x64) (HKLM\...\{C912E33F-956A-4921-9F55-CC11AE8F09AF}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.22 (x64) (HKLM\...\{C43A1A89-0CA5-43FD-BDC4-3B85DAD06A41}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.22 (x64) (HKLM-x32\...\{9a1a4be8-ffdb-48b5-b47b-f787981592d8}) (Version: 8.0.22.35427 - Microsoft Corporation)
Microsoft .NET Runtime - 8.0.22 (x86) (HKLM-x32\...\{3BAD90A6-48B6-4C89-97FF-02FEB96227C1}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.22 - Shared Framework (x86) (HKLM-x32\...\{251a18cb-cb97-48e3-ac2c-f57e06f8ed25}) (Version: 8.0.22.25528 - Microsoft Corporation)
Microsoft ASP.NET Core 8.0.22 Shared Framework (x86) (HKLM-x32\...\{1DFBD7A0-CB7B-392F-B3B0-76B85C9B01EB}) (Version: 8.0.22.25528 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 143.0.3650.96 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 143.0.3650.96 - Microsoft Corporation) Hidden
Microsoft Expression Design 4 (HKLM-x32\...\{EDF6CEF3-8415-4868-8B1F-8D9E5FF8FC23}) (Version: 8.0.31217.1 - Microsoft Corporation) Hidden
Microsoft Expression Design 4 (HKLM-x32\...\Design_8.0.31217.1) (Version: 8.0.31217.1 - Microsoft Corporation)
Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0407-1000-0000000FF1CE}_HOMESTUDENTR_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Excel MUI (German) 2007 (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (HKLM-x32\...\{90120000-00A1-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (HKLM-x32\...\{90120000-001F-040C-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (HKLM-x32\...\{90120000-001F-0410-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (HKLM-x32\...\{90120000-002C-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{A23BFC95-4A73-410F-9248-4C2B48E38C49}) (Version: - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (HKLM\...\{90120000-002A-0407-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (HKLM-x32\...\{90120000-006E-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneNote - de-de (HKLM\...\OneNoteFreeRetail - de-de) (Version: 16.0.19426.20218 - Microsoft Corporation)
Microsoft Research Cliplets (HKLM\...\{A4DA1935-2F04-4AFF-BE48-085CCC7BD0CB}) (Version: 1.1.1 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35208 (HKLM-x32\...\{e90abaf0-d749-437b-ba99-cda1c84b6754}) (Version: 14.44.35208.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35208 (HKLM-x32\...\{5A76FFAE-36C5-4648-80BD-4BB5B6E971F0}) (Version: 14.44.35208 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35208 (HKLM-x32\...\{491C67BA-2F2F-4A90-B9DD-4C76BFDBEA02}) (Version: 14.44.35208 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{FD9D64F4-CAF5-3D23-845A-B843C78CC1A5}) (Version: 10.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.60825 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.60825 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM\...\{61D4736B-3325-4D4A-BD41-8BD206C6A86E}) (Version: 48.144.23186 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM-x32\...\{0532b8f2-12d7-43de-95fc-7b87006758a8}) (Version: 6.0.36.34217 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.22 (x64) (HKLM\...\{4CCC1CCD-6FA3-4DD5-A06B-E94EA90094CF}) (Version: 64.88.42561 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.22 (x64) (HKLM-x32\...\{a3899eef-6164-4d42-b8c3-95ae6a844821}) (Version: 8.0.22.35428 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.22 (x86) (HKLM-x32\...\{2d077ae0-4556-4d5a-aa87-4ea76e32ec2d}) (Version: 8.0.22.35428 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.22 (x86) (HKLM-x32\...\{AABE221C-DA7E-4DDA-9AD6-322E03B95E2D}) (Version: 64.88.42561 - Microsoft Corporation) Hidden
Microsoft_VC100_CRT_x86 (HKLM-x32\...\{6FDDB201-2CA0-42BD-973F-7B2C4A61EA3F}) (Version: 1.0.0 - Microsoft)
Microsoft_VC80_CRT_x86 (HKLM-x32\...\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}) (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (HKLM-x32\...\{08D2E121-7F6A-43EB-97FD-629B44903403}) (Version: 1.00.0000 - Adobe) Hidden
MixPad Musikstudio-Software (HKLM-x32\...\MixPad) (Version: 13.54 - NCH Software)
Motion LIVE 2D Plug-in v1.11 Trial for Cartoon Animator (HKLM-x32\...\{E88C8914-A4CC-46EA-BC9B-2CC2E8BA6163}) (Version: 1.11.1915.1 - Reallusion Inc.)
Motion LIVE Plug-in v1.02 Trial for iClone (HKLM-x32\...\{172D3046-1186-4FC8-822A-1120E398B938}) (Version: 1.02.1203.1 - Reallusion Inc.)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 102.6.1 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 140.1.1 (x64 de)) (Version: 140.1.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MuseScore 3 (HKLM\...\{778D5D3D-5448-40F4-AACC-47D443C3E8A1}) (Version: 3.4.2.9788 - Werner Schweer and Others)
Music Recorder (HKLM-x32\...\{F5EF0BCC-8370-431F-B73E-AC6405C2DA1D}) (Version: 14.1.15600.0 - Audials AG)
MyEpson Portal (HKLM-x32\...\{3361D415-BA35-4143-B301-661991BA6219}) (Version: 1.1.2.2 - SEIKO EPSON CORPORATION) Hidden
MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version: - SEIKO EPSON Corporation)
MyKeyFinder 2026 (HKLM-x32\...\{c6396ed4-bdba-4f98-8739-767cb6bd16e6}_is1) (Version: 15.01 - Abelssoft)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 2.1 - F.J. Wechselberger)
NEAT projects 3 professional (HKLM\...\NEAT_PROJECTS_3_3_Df337A2C_is1) (Version: 3.32 - Franzis Verlag GmbH)
Nero 11 (HKLM-x32\...\{EB475D31-14C0-4DC3-8E0A-8AE1711399B3}) (Version: 11.0.10100 - Nero AG)
Nero 11 Cliparts (HKLM-x32\...\{B160A672-F326-4414-9BB0-A056C61B357C}) (Version: 11.0.10600.6.0 - Nero AG) Hidden
Nero 11 Disc Menus 1 (HKLM-x32\...\{A0F34849-D9AB-46DD-B1BE-BB0DB60B1FE8}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Disc Menus 2 (HKLM-x32\...\{7DF2B5EE-2C16-4E86-9C71-8678068AD805}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Disc Menus 3 (HKLM-x32\...\{5E98FDD6-3672-4DBE-AB8B-2C9A0BED1382}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Disc Menus Basic (HKLM-x32\...\{F49EF443-B2BD-4F10-8A46-87AFCDB90EDD}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Effects Basic (HKLM-x32\...\{E51BC4B0-EA5E-49CC-AF3B-93B5C627EC22}) (Version: 11.0.10600.6.0 - Nero AG) Hidden
Nero 11 Image Samples (HKLM-x32\...\{F3743A2C-5D5F-4456-8F98-5DF36A954C50}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Kwik Themes 1 (HKLM-x32\...\{B1F69AF3-B5B5-4CA5-ADC5-8A738EB6E574}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Kwik Themes 2 (HKLM-x32\...\{A4F6BE36-4826-45BA-A396-04F265A3B61D}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Kwik Themes Basic (HKLM-x32\...\{5A212B2D-140D-46F4-B625-2D1CA5A00594}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 PiP Effects Basic (HKLM-x32\...\{2CA7225D-CB12-462A-9DD1-50319E158BA5}) (Version: 11.0.10600.6.0 - Nero AG) Hidden
Nero 11 Video Samples (HKLM-x32\...\{A2CDC001-F8B3-4C64-9E74-2E3FA0FAC9D9}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero Audio Pack 1 (HKLM-x32\...\{A7A0BF2E-31CC-49E3-9913-52C503EB969D}) (Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero BackItUp (HKLM-x32\...\{EA03E7E5-6757-4A9A-9B36-C0022BE752D2}) (Version: 18.0.3040 - Nero AG) Hidden
Nero BackItUp 11 (HKLM-x32\...\{AB2BBC64-8AC8-4E66-BBF3-E22D5EACEECA}) (Version: 6.0.10700.6.100 - Nero AG) Hidden
Nero BackItUp 11 Help (CHM) (HKLM-x32\...\{6AB2427E-A18F-4809-9A12-29F5EBABBB3A}) (Version: 11.0.10000 - Nero AG) Hidden
Nero BackItUp 2017 Essentials (HKLM-x32\...\{0A5CD1E5-5F6E-4E9B-AAE6-E368D1784693}) (Version: 18.1.00100 - Nero AG)
Nero Burning ROM 11 (HKLM-x32\...\{9D8491AD-D0D2-4B51-AA4A-A8B67795A553}) (Version: 11.0.10700.12.100 - Nero AG) Hidden
Nero Burning ROM 11 Help (CHM) (HKLM-x32\...\{53F7746A-96AA-49A5-86B8-59989680DAC5}) (Version: 11.0.10000 - Nero AG) Hidden
Nero ControlCenter (HKLM-x32\...\{ABC88553-8770-4B97-B43E-5A90647A5B63}) (Version: 11.4.0006 - Nero AG) Hidden
Nero ControlCenter 11 Help (CHM) (HKLM-x32\...\{D4D66270-9147-4BDF-9946-FCA2B303AA8F}) (Version: 11.0.10000 - Nero AG) Hidden
Nero Core Components (HKLM-x32\...\{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}) (Version: 11.6.0023 - Nero AG) Hidden
Nero CoverDesigner 11 (HKLM-x32\...\{FF44BCE5-5A18-4051-85F0-BC172D7B4695}) (Version: 6.0.10500.8.100 - Nero AG) Hidden
Nero CoverDesigner 11 Help (CHM) (HKLM-x32\...\{55C2143E-FBA5-442F-9AFA-726FF068F39D}) (Version: 11.0.10000 - Nero AG) Hidden
Nero Express 11 (HKLM-x32\...\{E10AAE4A-98B8-420A-BD93-E0520C23D624}) (Version: 11.0.10700.12.100 - Nero AG) Hidden
Nero Express 11 Help (CHM) (HKLM-x32\...\{D2CBEFA4-F2D3-4E97-A171-8BFD6A31A5EC}) (Version: 11.0.10000 - Nero AG) Hidden
Nero Kwik Media (HKLM-x32\...\{BE814218-3919-4EA3-868A-2F60BC135CB4}) (Version: 1.10.14100.42.100 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (HKLM-x32\...\{B9B1BA7F-7E07-49DD-A713-5B397A5BB66B}) (Version: 11.0.10000 - Nero AG) Hidden
Nero Recode 11 (HKLM-x32\...\{4162E4B4-DB62-4719-9921-A59B2671C1CB}) (Version: 5.0.11300.15.100 - Nero AG) Hidden
Nero Recode 11 Help (CHM) (HKLM-x32\...\{57F80ECF-E27C-4EEE-AB58-E971BACE2639}) (Version: 11.0.10000 - Nero AG) Hidden
Nero RescueAgent 11 (HKLM-x32\...\{034DCAF9-96E7-4936-9A07-712F80B5181E}) (Version: 4.0.10300.7.100 - Nero AG) Hidden
Nero RescueAgent 11 Help (CHM) (HKLM-x32\...\{D01CE99A-8802-483C-A79F-298B691EB432}) (Version: 11.0.10000 - Nero AG) Hidden
Nero SoundTrax 11 (HKLM-x32\...\{0713D1F9-DD77-42C1-8C7D-54D479E2E743}) (Version: 5.0.10300.3.100 - Nero AG) Hidden
Nero SoundTrax 11 Help (CHM) (HKLM-x32\...\{390757AA-8830-43DC-AEE0-4E5B6F8439EB}) (Version: 11.0.10000 - Nero AG) Hidden
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 11.0.13600.45.0 - Nero AG) Hidden
Nero Video 11 (HKLM-x32\...\{0D7A4289-99CF-4B8D-B812-86BE50A54552}) (Version: 8.0.12900.10.100 - Nero AG) Hidden
Nero Video 11 Help (CHM) (HKLM-x32\...\{FAC3C37E-EDAB-4F3A-A173-A7C70CC88F09}) (Version: 11.0.10000 - Nero AG) Hidden
Nero WaveEditor 11 (HKLM-x32\...\{8014FACB-1D1D-48C2-94AA-E29EE2E6B9CE}) (Version: 6.0.10500.3.100 - Nero AG) Hidden
Nero WaveEditor 11 Help (CHM) (HKLM-x32\...\{EB8DED20-A887-4A9C-BB5A-F3E7523DFB44}) (Version: 11.0.10000 - Nero AG) Hidden
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
O&K Print Router (HKLM-x32\...\O&K Print Router) (Version: 3.0 - O&K Software Ltd.)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.19426.20170 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.19426.20170 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.19426.20170 - Microsoft Corporation) Hidden
onlineTV 18 (HKLM-x32\...\{58B7E23E-64FF-4A70-83EB-8CAF8FE5A78B}_is1) (Version: 18.22.11.3 - concept/design GmbH)
OpenOffice 4.1.15 (HKLM-x32\...\{D8DD7A6F-CB70-43AF-9A0C-9A5A4C195068}) (Version: 4.115.9813 - Apache Software Foundation)
OpenOffice Updater (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\OpenOffice Updater) (Version: 1.1.10 - OpenOffice) <==== ACHTUNG
Opera Mail 1.0 (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Opera 1.0.1044) (Version: 1.0.1044 - Opera Software ASA)
Opera Stable 125.0.5729.49 (HKLM-x32\...\Opera 125.0.5729.49) (Version: 125.0.5729.49 - Opera Software)
OptiTrack Profile v1.02 Trial for Motion LIVE Plug-in (HKLM-x32\...\{DF3F118D-8794-48E8-9228-3DF9C437A731}) (Version: 1.02.1130.1 - Reallusion Inc.)
Overlay Effects for Lightroom Version 1.0.3 (HKLM\...\{A2AEED12-A791-4AB5-B9FB-231B4129000E}_is1) (Version: 1.0.3 - Picture Instruments)
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 11.27.0 (64 Bit) (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.27.0 - Geek Software GmbH)
PDF24 Creator 11.28.2 (32 Bit) (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.28.2 - Geek Software GmbH)
Perception Neuron Profile v1.0 Trial for Motion LIVE 2D Plug-in (HKLM-x32\...\{3A2CF4BF-6F79-46DC-9DF3-50CB0026D4D6}) (Version: 1.0.1707.1 - Reallusion Inc.)
Perception Neuron Profile v1.02 Trial for Motion LIVE Plug-in (HKLM-x32\...\{436D8673-70A9-4D07-AD78-51DE4BA7B982}) (Version: 1.02.1130.1 - Reallusion Inc.)
PHOTOfunSTUDIO 9.7 PE (HKLM-x32\...\{2A71E3D5-1714-4E8F-88CD-7C06894FA6A2}) (Version: 9.07.706.1031 - Panasonic Corporation)
Photopea PSD Editor Plug-in v1.0 for Cartoon Animator (HKLM-x32\...\{EDAFF67C-096E-4A7B-B3CD-8CFAB4384934}) (Version: 1.0.1016.1 - Reallusion Inc.)
PopcornFX Plug-in v1.01 Trial for iClone (HKLM-x32\...\{D719716D-0502-452D-ABC8-F88235049A9A}) (Version: 1.01.1519.1 - Reallusion Inc.)
Qualisys Profile v1.0 Trial for Motion LIVE Plug-in (HKLM-x32\...\{8B19FF77-91D0-4EEA-86D8-2D1C868D0A7A}) (Version: 1.0.0618.1 - Reallusion Inc.)
QuickTime (HKLM-x32\...\{C78EAC6F-7A73-452E-8134-DBB2165C5A68}) (Version: 7.62.14.0 - Apple Inc.)
RawTherapee Version 5.4 (HKLM\...\RawTherapee5.4_is1) (Version: 5.4 - rawtherapee.com)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.)
Realtek USB Wireless LAN Driver (HKLM-x32\...\InstallShield_{DBCC4C27-F949-482b-B786-7B3B67587CD2}) (Version: Drv_3.00.0019 - REALTEK Semiconductor Corp.)
Recordify 2023 (HKLM-x32\...\{E25B0FAA-66E5-4D2E-9B48-3B85B31543BF}_is1) (Version: 8.03 - Abelssoft)
Revo Uninstaller 2.6.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.5 - VS Revo Group, Ltd.)
Rokoko Profile v1.0 Trial for Motion LIVE 2D Plug-in (HKLM-x32\...\{68BED2C8-814B-4F18-825D-AB06C3D06CB7}) (Version: 1.0.1924.1 - Reallusion Inc.)
Rokoko Profile v1.02 Trial for Motion LIVE Plug-in (HKLM-x32\...\{2719BB11-4A27-4C34-9205-0349E860E20F}) (Version: 1.02.1130.1 - Reallusion Inc.)
ScreenCamera.Net registered to GiveAwayOfTheDay Version 1.4.5.41 (HKLM-x32\...\{6C47663A-C5B9-4404-A4BA-E75392F33B2C}_is1) (Version: 1.4.5.41 - PCWinSoft Software)
SHARPEN #5 professional (HKLM\...\SHARPEN_5_3_FCDF957E_is1) (Version: 5.41 - Accelerated Vision UG)
SILKYPIX Developer Studio 3.0 SE (HKLM-x32\...\InstallShield_{B2F25F71-D920-4288-A548-54CD253DEF14}) (Version: 3 - Ichikawa Soft Laboratory)
SILKYPIX Developer Studio 8 SE (HKLM-x32\...\{593959B5-2971-430C-82C2-6F51C7EE8B34}) (Version: 8 - Ichikawa Soft Laboratory)
SlimDX Runtime .NET 4.0 x86 (January 2012) (HKLM-x32\...\{7EBD0E43-6AC0-4CA8-9990-00E50069AD29}) (Version: 2.0.13.43 - SlimDX Group)
Smart Gallery Plug-in v1.12 for iClone (HKLM-x32\...\{4581D025-E559-40F4-A655-3243C877EABC}) (Version: 1.12.0827.1 - Reallusion Inc.)
Smart Gallery Plug-in v1.31 for Character Creator (HKLM-x32\...\{F33C21BF-AB8E-4196-BAD3-A5FC1BF40632}) (Version: 1.31.2226.1 - Reallusion Inc.)
SmartTools Servicepack 2018 für Excel (HKLM-x32\...\{07B86ED7-55AC-49C0-9814-B070B969DC62}) (Version: 1.0.3.0 - SmartTools Publishing)
Software Informer 1.4.1305.0 (HKLM\...\Software Informer_is1) (Version: - Informer Technologies, Inc.)
Spotify (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Spotify) (Version: 1.2.44.405.g81fd6352 - Spotify AB)
Spyder4Elite (HKLM-x32\...\Spyder4Elite) (Version: - )
SpyderPRINT (HKLM-x32\...\SpyderPRINT) (Version: - )
SpyderStudio (HKLM-x32\...\SpyderStudio) (Version: - )
Sqirlz Morph (HKLM-x32\...\Sqirlz Morph) (Version: 2.0 - xiberpix)
Sweet Home 3D version 6.1.2 (HKLM\...\Sweet Home 3D_is1) (Version: 6.1.2 - eTeks)
Switch Audio-Converter (HKLM-x32\...\Switch) (Version: 13.24 - NCH Software)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synfig Studio (64bit) (HKLM\...\synfigstudio) (Version: 1.2.2-286f1 - )
Tablet Driver With Macrokey Manager (HKLM\...\RmTablet) (Version: 4.13 - )
ThunderSoft GIF Converter (3.1.0.0) (HKLM-x32\...\ThunderSoft GIF Converter_is1) (Version: 3.1.0.0 - ThunderSoft)
TuneFab Spotify Music Converter 3.1.23 (HKLM\...\9ff685d9-8f1e-59e1-a273-b7c9e7cf0c17) (Version: 3.1.23 - TuneFab)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Update Notifier (HKLM\...\{A0CA66DA-49B3-4D6F-92EA-B4CBC60365E0}) (Version: 3.0.0.73 - MAGIX Software GmbH) Hidden
Update Notifier (HKLM\...\MX.{A0CA66DA-49B3-4D6F-92EA-B4CBC60365E0}) (Version: 3.0.0.73 - MAGIX Software GmbH)
Videomizer 2 (HKLM-x32\...\{B84CB121-58A9-4D5E-0001-805171E318F3}) (Version: 2.0.16.504 - Engelmann Media GmbH)
VideoPad Video-Editor (HKLM-x32\...\VideoPad) (Version: 17.48 - NCH Software)
VideoProc Converter (HKLM-x32\...\VideoProc Converter) (Version: 4.4 - Digiarty, Inc.)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.16 - VideoLAN)
VLC Plus Player Updater (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\AM VLC Plus Player Updater) (Version: 1.0.2 - ) <==== ACHTUNG
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Watermark Software 8.3 (HKLM-x32\...\Watermark Software) (Version: 8.3 - watermark-software.com)
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 20.54 - NCH Software)
welcome (HKLM-x32\...\{CCE210DF-7EEF-4A76-A63C-3EB091FDB992}) (Version: 11.0.20000.0.0 - Nero AG) Hidden
WhatsApp (Outdated) (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\WhatsApp) (Version: 2.2326.10 - WhatsApp)
Wi-Fi-Adapter (HKLM\...\{5A93E57B-A092-48B9-9A5A-7F7218FF8F29}_is1) (Version: 1.0.0.10 - Ugreen)
Windows 7 Games for Windows 10 and 8 (HKLM\...\Win7Games) (Version: 2.0 - hxxp://winaero.com)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC [2025-12-23] ()
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_6.0.0.1_x86__enpm4xejd91yc [2024-12-12] (Adobe Systems Incorporated)
Adobe Photoshop Express: Image Editor, Änderungen, Filter, Effekte, Rahmen -> C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobePhotoshopExpress_3.6.392.0_x64__mtcwf2zmmt10c [2023-01-26] (Adobe Inc.)
Adobe XD -> C:\Program Files\WindowsApps\Adobe.XD_51.0.12.6_x64__pc75e8sa7ep4e [2023-01-26] (Adobe Inc.)
Adobe-Fresco -> C:\Program Files\WindowsApps\Adobe.Fresco_3.2.0.745_x64__pc75e8sa7ep4e [2023-01-26] (Adobe Inc.)
Amazon.de: Amazon Prime -> C:\Program Files\WindowsApps\www.amazon.de-22BA6F70_1.0.0.1_neutral__v3aseepm5s0mp [2025-12-28] (www.amazon.de)
ARD Audiothek -> C:\Program Files\WindowsApps\www.ardaudiothek.de-6D6467DE_1.0.0.2_neutral__x8af41t9fvg4c [2025-12-28] (www.ardaudiothek.de)
Deutsch - Plattdeutsch Übersetzer - AI Translator Mr. Dialect -> C:\Program Files\WindowsApps\mr-dialect.com-75DB0486_1.0.0.1_neutral__r4bnghda1b544 [2025-12-28] (mr-dialect.com)
FloraWeb - Willkommen bei FloraWeb -> C:\Program Files\WindowsApps\www.floraweb.de-B816B02A_1.0.0.1_neutral__vc34710g4vf76 [2025-12-28] (www.floraweb.de)
Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation)
FreeCell -> C:\Program Files\WindowsApps\www.free-freecell-solitaire.com-A837CC6C_1.0.0.2_neutral__x3j35fb5y4knr [2025-12-28] (www.free-freecell-solitaire.com)
FreeCell HD -> C:\Program Files\WindowsApps\32988BernardoZamora.Dummy2_1.26.88.0_x64__1fgex2kbsn6g8 [2025-12-29] (Bernardo Zamora)
FreeCell Solitaire!! -> C:\Program Files\WindowsApps\476931bsyl.FreeCellSolitaire_1.6.0.0_x64__cgv7566y2ek3j [2025-12-16] (1bsyl)
FreeCell Solitär -> C:\Program Files\WindowsApps\TreeCardGames.FreeCellCollectionFree_5.3.2.0_x64__n666hb6ddc5jp [2023-07-12] (TreeCardGames)
Günther Blaich - Europäische Orchideen und andere Pflanzen - European orchids and other plants -> C:\Program Files\WindowsApps\www.guenther-blaich.de-B1F64B0B_1.0.0.0_neutral__8msq1feav1cr6 [2023-03-31] (www.guenther-blaich.de)
Günther Blaich - Europäische Orchideen und andere Pflanzen - European orchids and other plants -> C:\Program Files\WindowsApps\www.guenther-blaich.de-C2737558_1.0.0.1_neutral__8msq1feav1cr6 [2023-10-16] (www.guenther-blaich.de)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_162.3.1128.0_x64__v10z8vjag6ke6 [2025-12-29] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa [2025-12-29] (Apple Inc.) [Startup Task]
Joyn -> C:\Program Files\WindowsApps\www.joyn.de-DEF5F6A1_1.0.0.1_neutral__pcbtsyen7zd6j [2025-12-28] (www.joyn.de)
Klimazonen in Deutschland und Winterhärte -> C:\Program Files\WindowsApps\www.garten-pur.de-3CD2266D_1.0.0.1_neutral__fs8jqsebezzny [2025-12-28] (www.garten-pur.de)
Kodi -> C:\Program Files\WindowsApps\XBMCFoundation.Kodi_21.2.500.0_x64__4n2hpmxwrvr6p [2025-12-29] (XBMC Foundation)
Local AI Manager for Microsoft 365 -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\AI [2025-12-23] ()
Mahjong Solitaire -> C:\Program Files\WindowsApps\7333BvG.MahjongSolitaireFree_2.9.4.0_x64__y1s27y3vcjf5c [2025-12-29] (BvG)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation)
Mein schöner Garten: Pflanzen, Garten & Gartentipps. -> C:\Program Files\WindowsApps\www.mein-schoener-garten.de-59EACECB_1.0.0.2_neutral__7cmmreg3ma958 [2025-12-28] (www.mein-schoener-garten.de)
Mein schöner Garten: Pflanzen, Garten & Gartentipps. -> C:\Program Files\WindowsApps\www.mein-schoener-garten.de-FEC576CC_1.0.0.0_neutral__7cmmreg3ma958 [2023-03-31] (www.mein-schoener-garten.de)
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1805.2.0_x64__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1805.2.0_x86__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Jigsaw -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJigsaw_2.8.4231.0_x86__8wekyb3d8bbwe [2025-12-29] (Microsoft Studios)
Microsoft Midi gm.dls -> C:\Program Files\WindowsApps\Microsoft.Midi.GmDls_1.0.1.0_neutral__8wekyb3d8bbwe [2023-01-26] (Microsoft Platform Extensions)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_55.20610.576.0_x64__8wekyb3d8bbwe [2025-12-29] (Microsoft Corporation)
Microsoft Word - 47_Pflanzenportraet_Sauromatum_guttatum.doc -> C:\Program Files\WindowsApps\www.botanik-bochum.de-1D8C8514_1.0.0.1_neutral__tf53kk577w776 [2025-12-28] (www.botanik-bochum.de)
Microsoft.Office.ActionsServer -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\ActionsServer [2025-12-23] ()
Moser Care and Support Wear -> C:\Program Files\WindowsApps\www.mosercare.de-5945C851_1.0.0.1_neutral__dkwc0jk62d6fr [2025-12-28] (www.mosercare.de)
NaturaDB - Finde die passenden Pflanzen. -> C:\Program Files\WindowsApps\www.naturadb.de-BAD1CB5_1.0.0.1_neutral__b30na7fkwqa6g [2025-12-28] (www.naturadb.de)
Netzkino -> C:\Program Files\WindowsApps\35124netzkino.Netzkino_3.3.1.1_neutral__843rhjq2hbnd4 [2023-01-26] (netzkino) [MS Ad]
Niedersachsens Kliniken im Check Januar 2025: Was leisten sie in der Knie- und Hüftmedizin? news.de -> C:\Program Files\WindowsApps\www.news.de-DF263BF_1.0.0.1_neutral__wm4rcazk6szy8 [2025-12-28] (www.news.de)
OfficePushNotificationsUtility -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16 [2025-12-23] ()
Öffnen, Bearbeiten und Konvertieren von ATN-Dateien DateiWiki Blog -> C:\Program Files\WindowsApps\datei.wiki-A4EBD80C_1.0.0.1_neutral__pbgnkrshpkp7g [2025-12-28] (datei.wiki)
OneLaunch -> C:\Program Files\WindowsApps\getmanualssearch.com-DE6DDF6C_1.0.0.3_neutral__eg3srx13a0kee [2025-12-28] (getmanualssearch.com)
Översetter: Hochdeutsch - Plattdeutsch Übersetzer -> C:\Program Files\WindowsApps\www.xn-versetter-z7a.de-BE380337_1.0.0.1_neutral__2v621k8gjawty [2025-12-28] (www.översetter.de)
PayPal -> C:\Program Files\WindowsApps\www.paypal.com-36CE595_1.0.0.1_neutral__vct904jxvz49g [2025-12-28] (www.paypal.com)
PDF Converter -> C:\Program Files\WindowsApps\AnywaySoftInc.PDFConverter_2.0.9.0_x64__0qkrc2qacwvfm [2023-01-26] (AnywaySoft, Inc.) [MS Ad]
Prime Video for Windows -> C:\Program Files\WindowsApps\AmazonVideo.PrimeVideo_1.1.6.0_x64__pwbj9vvecjh7j [2025-12-29] (Amazon Development Centre (London) Ltd)
Promesse de fleurs, Qualitätspflanzen seit 1950 -> C:\Program Files\WindowsApps\www.promessedefleurs.de-649494B7_1.0.0.1_neutral__yfvr7wv0rmg4y [2025-12-28] (www.promessedefleurs.de)
Saatgut-Vielfalt www.saatgut-vielfalt.de -> C:\Program Files\WindowsApps\www.saatgut-vielfalt.de-59A19251_1.0.0.0_neutral__nx0er27znpjwg [2023-03-31] (www.saatgut-vielfalt.de)
Saatgut-Vielfalt www.saatgut-vielfalt.de -> C:\Program Files\WindowsApps\www.saatgut-vielfalt.de-FBA683DE_1.0.0.2_neutral__nx0er27znpjwg [2025-12-28] (www.saatgut-vielfalt.de)
Sinar - Fotografie & Videografie Leicht Gemacht -> C:\Program Files\WindowsApps\sinar.ch-D6790AE4_1.0.0.1_neutral__jvgj41ckkxmet [2025-12-28] (sinar.ch)
Solitaire FRVR -> C:\Program Files\WindowsApps\www.msn.com-8E02E2B_1.0.0.0_neutral__q77jw2zwjvy92 [2023-02-12] (www.msn.com)
Solitaire FRVR -> C:\Program Files\WindowsApps\www.msn.com-F79F426E_1.0.0.1_neutral__q77jw2zwjvy92 [2023-10-16] (www.msn.com)
Startseite Staudenfreunde -> C:\Program Files\WindowsApps\gds-staudenfreunde.de-1C4B8435_1.0.0.1_neutral__qg9r9qvxrk70j [2025-12-28] (gds-staudenfreunde.de)
Staudengärtnerei Gaißmayer (Pflanzendaten) -> C:\Program Files\WindowsApps\www.gaissmayer.de-6C5CE7BE_1.0.0.0_neutral__0k7pksr2c3c5c [2023-03-31] (www.gaissmayer.de)
Staudengärtnerei Gaißmayer (Pflanzendaten) -> C:\Program Files\WindowsApps\www.gaissmayer.de-9769D9E9_1.0.0.1_neutral__0k7pksr2c3c5c [2023-10-16] (www.gaissmayer.de)
VLC -> C:\Program Files\WindowsApps\VideoLAN.VLC_3.2.1.0_x64__paz6r1rewnh0a [2024-07-27] (VideoLAN)
Waldsteinia lobata (Waldsteinia mit Lappen, Barren Erdbeere mit Lappen, Barren Strawberry mit Lappen) - Verwendung, Vorteile und gebräuchliche Namen -> C:\Program Files\WindowsApps\www.selinawamucii.com-E8D51AEE_1.0.0.1_neutral__h77grymjjvpty [2025-12-28] (www.selinawamucii.com)
Was sind Winterhärtezonen? - Plantura -> C:\Program Files\WindowsApps\www.plantura.garden-731F3C29_1.0.0.1_neutral__javay0bkw47v8 [2025-12-28] (www.plantura.garden)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2587.9.0_x64__cv1g1gvanyjgm [2025-12-30] (WhatsApp Inc.) [Startup Task]
Wie man Hybrid-Windröschen anbaut und pflegt -> C:\Program Files\WindowsApps\www.picturethisai.com-B4712BF1_1.0.0.1_neutral__8pemh7k5ekhyc [2025-12-28] (www.picturethisai.com)
Winterhärtezonen im Überblick winterharte Pflanzen · Wächter Pflanzencenter -> C:\Program Files\WindowsApps\www.waechter-pflanzencenter.de-77D2E06F_1.0.0.1_neutral__q6m5ceemv6ndm [2025-12-28] (www.waechter-pflanzencenter.de)
YouTube -> C:\Program Files\WindowsApps\www.youtube.com-54E21B02_1.0.0.2_neutral__pd8mbgmqs65xy [2025-12-28] (www.youtube.com)
Zeigerwerte -> C:\Program Files\WindowsApps\www.oekologie-seite.de-1DA4294D_1.0.0.1_neutral__3n8wxn7ejyg7w [2025-12-28] (www.oekologie-seite.de)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\ChromeHTML: -> <==== ACHTUNG
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-9973BD01F8E3} -> [Creative Cloud Files] => C:\Users\Horst\Creative Cloud Files [2020-06-20 18:33]
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> "C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{1AC77AE9-9EC6-405A-9F9B-C06AB3C10B71}\InprocServer32 -> C:\Program Files\Microsoft Research\Image Composite Editor\ShellExtension.dll (Microsoft Corporation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> "C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{7B8A4895-8074-9EBA-2B64-0C2FC00AEDCE}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{97D9AC27-40D1-4F2B-973E-C8190480E3D9}\localserver32 -> C:\Users\Horst\AppData\Local\1&1 Mail & Media GmbH\MCDS\1\Application\1\activator.exe (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{9A527227-46B8-45B1-9BDF-62E4C71CC055}\InprocServer32 -> C:\Users\Horst\AppData\Local\1&1 Mail & Media GmbH\MCDS\1\Application\1\dbc.dll (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{AB9B6851-C94E-43B7-A304-F40DEA3FA09F}\localserver32 -> "c:\program files\musehub\current\musehub.exe" ----AppNotificationActivated: => Keine Datei
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{ACEA8D04-E06D-805A-1F4B-6A46CE1EB7EE}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{AEBAFF06-B83A-4F24-9CC1-D63F9EAA2F86}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender 2.93\BlendThumb.dll (Stichting Blender Foundation -> )
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-12-12] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-12-12] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-12-12] (Adobe Inc. -> )
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-08-03] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-12-12] (Adobe Inc. -> )
ContextMenuHandlers1-x32: [ASZipF] -> {e03d3e68-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\ASZSHLEXT.DLL [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers1: [ASZipF64] -> {e03d3e78-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\aszshlext64.dll [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers1: [MVDShlext] -> {027B567F-6B25-42C1-9C0B-5CE8E04024BD} => -> Keine Datei
ContextMenuHandlers1-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-30] (F.J. Wechselberger) [Datei ist nicht signiert]
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-08-03] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [MGFolderIconBasicShellEx] -> {6b3c2037-775b-3a6e-9773-0bfcc92d8947} => G:\Program Files\MSTechFolderIconBasicShellEx.DLL -> Keine Datei
ContextMenuHandlers4: [MVDShlext] -> {027B567F-6B25-42C1-9C0B-5CE8E04024BD} => -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxDTCM.dll [2022-07-29] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-08-03] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-12-12] (Adobe Inc. -> )
ContextMenuHandlers6-x32: [ASZipF] -> {e03d3e68-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\ASZSHLEXT.DLL [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers6: [ASZipF64] -> {e03d3e78-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\aszshlext64.dll [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2017-08-19] (Foxit Software Incorporated -> Foxit Software Inc.)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Drivers32: [VIDC.MPG4] => C:\Windows\SysWOW64\mpg4c32.dll [420240 2006-10-11] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Drivers32: [VIDC.MP42] => C:\Windows\SysWOW64\mpg4c32.dll [420240 2006-10-11] (Microsoft Corporation -> Microsoft Corporation)
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Horst\Favorites\Fotor for desktop.lnk -> hxxp://www.fotor.com/windows/review.htm
ShortcutWithArgument: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__jolaaineabphadfbdnebehahbneddjib\Mein schöner Garten Pflanzen, Garten & Gartentipps.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=jolaaineabphadfbdnebehahbneddjib --app-url=hxxps://www.mein-schoener-garten.de/ --app-launch-source=4
ShortcutWithArgument: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__jihamkfopolkefphcacleadneejocbjp\Saatgut-Vielfalt www.saatgut-vielfalt.de.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=jihamkfopolkefphcacleadneejocbjp --app-url=hxxps://www.saatgut-vielfalt.de/inhalt/geschichte --app-launch-source=4
ShortcutWithArgument: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__hokbbolikgdbclpcibfeflcdfilocfnl\Mahjong Deluxe.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=hokbbolikgdbclpcibfeflcdfilocfnl --app-url=hxxps://www.msn.com/de-de/play/mahjong-deluxe/cg-9pg0crrcqq20?ocid=cgpwa --app-launch-source=4
ShortcutWithArgument: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__gmjobpdpodpojmpfpjljmgfjgikblaak\Staudengärtnerei Gaißmayer (Pflanzendaten).lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=gmjobpdpodpojmpfpjljmgfjgikblaak --app-url=hxxps://www.gaissmayer.de/web/shop/themenwelten/mit-stauden-gestalten/wild-und-naturgarten/stauden-fuer-naturnahe-pflanzungen/51/malva-sylvestris-var-mauritiana/8908/ --app-launc
ShortcutWithArgument: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__feeiifojcffkbednfkadleihdgbndnlh\Günther Blaich - Europäische Orchideen und andere Pflanzen - European orchids and other plants.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=feeiifojcffkbednfkadleihdgbndnlh --app-url=hxxp://www.guenther-blaich.de/ --app-launch-source=4
ShortcutWithArgument: C:\Users\Horst\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2017-09-25 21:05 - 2009-04-03 17:51 - 000336896 _____ (CANON INC.) [Datei ist nicht signiert] C:\WINDOWS\System32\CNMN6PPM.DLL
2016-09-14 13:31 - 2016-09-14 13:31 - 000500736 ____S (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\WINDOWS\System32\enppmon.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\LOOXIS:{4A003100-7400-7300-4200-740077005100} [704]
AlternateDataStreams: C:\LOOXIS:{61004700-7900-7600-6E00-630043005400} [236]
AlternateDataStreams: C:\LOOXIS:{6E005900-4D00-2B00-4F00-4D0078006900} [704]
AlternateDataStreams: C:\ProgramData:NetOptimizer [294]
AlternateDataStreams: C:\Windows:CM_4536bcf519c7a8c697b63cf41dd9239b7eb9593ecc22faca240a5b6a64c20234 [74]
AlternateDataStreams: C:\Windows:CM_a751d84a57a0954e38fd5e625c6d6d4047d58bde2aeb7d4a85f5a8d2724b91d4 [74]
AlternateDataStreams: C:\Users\All Users:NetOptimizer [294]
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NetOptimizer [294]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:3241321C [131]
AlternateDataStreams: C:\ProgramData\TEMP:810B9F0D [130]
AlternateDataStreams: C:\ProgramData\TEMP:B56E7461 [302]
AlternateDataStreams: C:\ProgramData\TEMP:DFB59A96 [122]
AlternateDataStreams: C:\Users\Horst\Documents\Apache_OpenOffice_V4.1.15.exe:BDU [0]
AlternateDataStreams: C:\Users\Horst\Documents\ashampoo_backup_2023_38725.exe:BDU [0]
AlternateDataStreams: C:\Users\Horst\Documents\ChromeSetup.exe:BDU [0]
AlternateDataStreams: C:\Users\Horst\Documents\OperaSetup (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Horst\Documents\Opera_111.0.5168.43_Setup_x64.exe:BDU [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {31BD138B-6AC5-484C-96F4-3E49E2D78DFC} URL = hxxps://go.gmx.net/br/ie_search_shopping/splugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {5083A602-2A2F-48B6-9E01-A949E74DF6BB} URL = hxxps://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {7B0DE5C9-898F-45E0-8C19-FECF88DC9136} URL = hxxps://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {8DE2F24E-0A2C-40B6-90C7-E11B772EF774} URL = hxxps://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {D8D808CB-8DD2-4649-906F-5F44064DAE80} URL = hxxps://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_241\bin\ssv.dll [2020-01-27] (Oracle America, Inc. -> Oracle Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
BHO: GMX MailCheck BHO -> {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} -> C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll [2022-08-10] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-01-27] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
BHO-x32: GMX MailCheck BHO -> {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} -> C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll [2022-08-10] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Toolbar: HKLM - GMX MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll [2022-08-10] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - GMX MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll [2022-08-10] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Toolbar: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> GMX MailCheck - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll [2022-08-10] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll [2022-08-10] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Handler-x32: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll [2022-08-10] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Da befinden sich 7942 mehr Seiten.
IE trusted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\webcompanion.com -> hxxp://webcompanion.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\123simsen.com -> www.123simsen.com
Da befinden sich 7946 mehr Seiten.
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2017-09-29 14:46 - 2016-07-16 12:45 - 000000824 ____N C:\WINDOWS\system32\drivers\etc\hosts
2019-07-28 16:01 - 2022-07-13 18:04 - 000000446 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
==================== Network ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
DNS Servers: 192.168.68.204
ist aktiviert.
Network Binding:
=============
Ethernet 2: Intel(R) Ethernet Connection (2) I219-LM -> e1d.sys
WLAN: Ugreen WIFI6 Wireless USB NIC -> aicusbwifi.sys
Ethernet 3: SAMSUNG Mobile USB Remote NDIS Network Device -> usb80236.sys
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> ;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Common Files\Adobe\AGL;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files (x86)\Smart Projects\IsoBuster;Y:\PROGRAMME\QTSystem\;C:\Program Files\dotnet\;
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-947909773-2885354443-2675781160-1010\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKLM\...\StartupApproved\StartupFolder: => "CodeMeter Control Center.lnk"
HKLM\...\StartupApproved\StartupFolder: => "StartRLCMS.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Ashampoo Backup PB"
HKLM\...\StartupApproved\Run: => "PrintDisp"
HKLM\...\StartupApproved\Run: => "Ashampoo WinOptimizer Live-Tuner2"
HKLM\...\StartupApproved\Run: => "MacrokeyManager"
HKLM\...\StartupApproved\Run: => "PDF24"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "LogiBolt"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "LogiOptions"
HKLM\...\StartupApproved\Run: => "EPPCCMON"
HKLM\...\StartupApproved\Run: => "Bdagent"
HKLM\...\StartupApproved\Run: => "Ashampoo Backup"
HKLM\...\StartupApproved\Run: => "BraveVpnWireguardService"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "ArcSoft Connection Service"
HKLM\...\StartupApproved\Run32: => "Adobe CCXProcess"
HKLM\...\StartupApproved\Run32: => "Opera Browser Assistant"
HKLM\...\StartupApproved\Run32: => "MailCheck IE Broker"
HKLM\...\StartupApproved\Run32: => "Lightkey Control Center"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\StartupFolder: => "Reallusion Hub.lnk"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\StartupFolder: => "mhelper.lnk"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\StartupFolder: => "SearchEngineOptimizer.lnk"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "QMxNetworkSync"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Amazon Music"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Amazon Music Helper"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000000"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "CloudApp"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000001"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "EPSDNMON"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "LogiBolt"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_6E2C73815817D7E02B41C013F4C55849"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Opera Stable"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Web Companion"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneLaunchUpdater"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneLaunch"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneLaunchChromium"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "com.doctolib.pro.desktop"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OpenOffice Updater"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Opera Air Stable"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{CBF3F5DB-C621-4568-966F-62883472AD88}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\cdVideoJukebox.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> concept/design GmbH)
FirewallRules: [{09DA3DAC-FFA4-43E1-9D2F-E5658635EE77}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\cdVideoJukebox.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> concept/design GmbH)
FirewallRules: [{DF6CB94B-876E-42D4-8EDC-558B319ECC8C}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\AMasterMain.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> FRANZIS GmbH)
FirewallRules: [{A69A7793-ABAC-492C-848E-68D649807F3B}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\AMasterMain.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> FRANZIS GmbH)
FirewallRules: [{D93DDB5A-D20C-42F0-8811-6AD3E2A92B54}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\AMaster.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> FRANZIS Verlag GmbH)
FirewallRules: [{BBD6EF72-0681-4F96-9636-8371017077F0}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\AMaster.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> FRANZIS Verlag GmbH)
FirewallRules: [UDP Query User{FFF36456-D06A-48D6-8267-C4D634C1047E}C:\program files\presonus\studio one 4\studio one.exe] => (Allow) C:\program files\presonus\studio one 4\studio one.exe (PreSonus) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{AC056B47-7D4F-420A-9DC2-7BEDFC5437DE}C:\program files\presonus\studio one 4\studio one.exe] => (Allow) C:\program files\presonus\studio one 4\studio one.exe (PreSonus) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{577F997A-40EC-4A20-9385-F690FE09890A}C:\program files\presonus\studio one 4\studio one.exe] => (Allow) C:\program files\presonus\studio one 4\studio one.exe (PreSonus) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{3816F851-D0B8-413C-A6D0-1451EB22AA41}C:\program files\presonus\studio one 4\studio one.exe] => (Allow) C:\program files\presonus\studio one 4\studio one.exe (PreSonus) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{82AB3EFC-BC92-47F3-891A-365E613F4E16}C:\users\horst\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\horst\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{B1C44072-1889-4C14-B73F-154365A5F566}C:\users\horst\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\horst\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{A2F28DC8-BEE4-41AF-B973-8C38283525CD}C:\users\horst\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\horst\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{594DDDCA-D253-4D1F-A983-FED18A7F0998}C:\users\horst\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\horst\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2933A59D-BE09-4E6D-B287-20A5B4B0D617}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe (Seiko Epson Corporation) [Datei ist nicht signiert]
FirewallRules: [{47F42FA9-2AE2-45CF-89BA-52A82A2F1F6C}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe (Seiko Epson Corporation) [Datei ist nicht signiert]
FirewallRules: [{B83426C5-573C-4E4E-BF45-83B1E070A7FC}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FirewallRules: [{245F42AB-CAB6-4998-B20B-85D01799D177}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FirewallRules: [{589FABB2-C469-4BA8-BC19-DEAB760E1843}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{37AB8189-FD24-4E63-B90B-684FE3670CA9}] => (Allow) LPort=31931
FirewallRules: [{FDCE0BC9-8514-417D-B704-B55AA2C4F668}] => (Allow) LPort=14714
FirewallRules: [{ADF12E9F-DFD5-4417-9D93-A5C81A3BD473}] => (Allow) LPort=12972
FirewallRules: [{6C290D82-D8A0-490C-B520-3D6152C8F702}] => (Allow) C:\Program Files (x86)\Music Recorder\Music Recorder 2016\Audials.exe (Audials AG -> Audials AG)
FirewallRules: [{8C763991-FC71-401C-835B-36770642759A}] => (Allow) LPort=53
FirewallRules: [{540DF1F0-A11D-402E-903D-427DB0B0A088}] => (Allow) LPort=53
FirewallRules: [{CA06D59F-1D64-4F1A-962F-99FE5F043266}] => (Allow) LPort=1542
FirewallRules: [{9707B72F-000D-455A-9664-4446FE315CEF}] => (Allow) LPort=1542
FirewallRules: [{1415630C-F8A8-4463-BC4C-44288E11E5EB}] => (Allow) C:\Program Files (x86)\Apowersoft\Beecut\BeeCut.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{14834C08-FFCD-4AC3-BA2F-47D165CE221D}] => (Allow) C:\Program Files (x86)\Apowersoft\Beecut\BeeCut.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{321DE7B7-E30C-43C0-BCB8-B7F927B77903}] => (Allow) C:\Program Files (x86)\Nero\Nero 2017\Nero BackItup\NBService.exe (Nero AG -> Nero AG)
FirewallRules: [{9E138320-5C87-45FD-9E5E-3CB09E47E28B}] => (Allow) C:\Program Files (x86)\Nero\Nero 2017\Nero BackItup\BackItUp.exe (Nero AG -> Nero AG)
FirewallRules: [TCP Query User{DE10AFAE-0CFA-49E8-BC52-3D421AC3A7D2}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{5D95BC7B-479A-4B06-B842-C3B63CFD55CE}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{2B4797CF-185B-479C-986F-4F983986460D}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{8EE2B736-BC18-458F-B158-85D74EE4E96D}C:\program files\logioptionsplus\logioptionsplus_agent.exe] => (Allow) C:\program files\logioptionsplus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{401CA946-3340-4715-B5AB-0F0887BBB13F}C:\program files\logioptionsplus\logioptionsplus_agent.exe] => (Allow) C:\program files\logioptionsplus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{47167B7B-EDA1-4416-AEBB-51A9C7FE14F6}C:\program files\logioptionsplus\logioptionsplus_agent.exe] => (Block) C:\program files\logioptionsplus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{9C82208F-0D77-4482-82C9-592B1A84FB9D}C:\program files\logioptionsplus\logioptionsplus_agent.exe] => (Block) C:\program files\logioptionsplus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{55E42E98-8ED2-4020-984F-5CE048D1B6BE}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{209FC917-FE9B-458A-A9EB-825F1F137EE8}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{1CC73C07-0143-449E-B92E-13778694A894}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{5D1275F0-AAB5-44A4-BEFA-46DEBFE02E25}] => (Allow) C:\Program Files\Audials\AudialsOneEdition 2024\Audials.exe => Keine Datei
FirewallRules: [{5CCB13C4-878C-4DC1-9869-8DF0E25E17F8}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{15B83743-99F3-4248-807A-1E6F66345B5F}] => (Allow) C:\Program Files\Common Files\MAGIX Services\Update Notifier\QMxNetworkSync.exe (MAGIX Software GmbH -> MAGIX)
FirewallRules: [{0F13DFB0-4324-4FCC-8B24-DCBDFF8132EE}] => (Allow) C:\Program Files\Audials\VisionEdition 2024\Audials.exe => Keine Datei
FirewallRules: [{07846DBD-3197-4CC2-B6C3-7E11FF473276}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3D7E19DD-C6CA-46F7-885D-D912A6B16E21}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A0A6B281-127B-4DE4-B767-16E65C3CB79B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E3FFD9D4-00B1-4EE3-84DF-BBF00E55D094}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BABBECB0-D86C-479C-A141-0CBB31C1F8F0}] => (Allow) C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe (Franz Josef Wechselberger -> F.J. Wechselberger)
FirewallRules: [TCP Query User{DBD1B99C-102F-45E4-990E-569CB1915F62}C:\program files\windowsapps\xbmcfoundation.kodi_21.1.500.0_x64__4n2hpmxwrvr6p\kodi.exe] => (Allow) C:\program files\windowsapps\xbmcfoundation.kodi_21.1.500.0_x64__4n2hpmxwrvr6p\kodi.exe => Keine Datei
FirewallRules: [UDP Query User{3E39EC19-3A86-4AC6-98FC-BB456A4AB0B6}C:\program files\windowsapps\xbmcfoundation.kodi_21.1.500.0_x64__4n2hpmxwrvr6p\kodi.exe] => (Allow) C:\program files\windowsapps\xbmcfoundation.kodi_21.1.500.0_x64__4n2hpmxwrvr6p\kodi.exe => Keine Datei
FirewallRules: [{3EEA9823-9587-4A40-8CF4-ACEADE2BF39B}] => (Allow) C:\Program Files\Audials\VisionEdition 2026\Audials.exe (Audials AG -> Audials AG)
FirewallRules: [TCP Query User{852AC122-13C2-4221-A926-0902A2897EC8}C:\users\horst\appdata\local\programs\opera air\opera.exe] => (Allow) C:\users\horst\appdata\local\programs\opera air\opera.exe => Keine Datei
FirewallRules: [UDP Query User{18E9A897-542F-48EC-B04A-2BC85CCF87E6}C:\users\horst\appdata\local\programs\opera air\opera.exe] => (Allow) C:\users\horst\appdata\local\programs\opera air\opera.exe => Keine Datei
FirewallRules: [TCP Query User{2CECC440-77E1-4E35-AEEC-BA47A7A6AB54}C:\users\horst\appdata\local\programs\opera air\opera.exe] => (Allow) C:\users\horst\appdata\local\programs\opera air\opera.exe => Keine Datei
FirewallRules: [UDP Query User{66CF8B42-6247-4A12-B4F5-B6C23AEC2D6C}C:\users\horst\appdata\local\programs\opera air\opera.exe] => (Allow) C:\users\horst\appdata\local\programs\opera air\opera.exe => Keine Datei
FirewallRules: [{8D314AFD-F087-46EE-9D92-E41A893C8427}] => (Allow) LPort=80
FirewallRules: [{AF95B744-6AC5-49AD-8843-6311FA0DE95D}] => (Allow) LPort=80
FirewallRules: [{E87837D1-A688-4DF0-9407-80D9FB8B3652}] => (Allow) C:\Program Files\Opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{FC667696-6E03-4CA6-8C9E-99C67D2BB7F6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{DD37AE8A-C176-440C-A117-77EB793AE804}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{4F8F8520-650F-4FD0-9AC0-4F1FE315EB9F}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{EDD6E01F-A986-40D2-928F-3F4EE384CEA6}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{AE81007D-B32E-49F1-8282-5B43924547A9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{5B78A22D-6D3E-46E4-AECD-D0CE4B81F74B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{7F6F4EEC-09A8-46FB-9E97-7AFB4A20F629}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{509DA566-F538-4D20-B4A0-421A2EEDAB81}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{990AE47E-2933-4D5E-8CDE-A1579F1F1E47}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Wiederherstellungspunkte =========================
02-01-2026 16:12:55 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (01/04/2026 11:55:51 AM) (Source: CertEnroll) (EventID: 87) (User: NT-AUTORITÄT)
Description: Fehler bei der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-7PAH99J$ über https://IFX-KeyId-d8a3f556085a68c8aa5d5fe079bcc6e9c6d37764.microsoftaik.azure.net/templates/Aik/scep:
SubmitDone
Submit(Request): Bad Request
{"Message":"Attestation statement cannot be verified, rejecting request. TPM firmware needs update."}
HTTP/1.1 400 Bad Request
Date: Sun, 04 Jan 2026 10:55:51 GMT
Content-Length: 101
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 49cacfef-c784-4f03-b06e-e61e964f22ea
Methode: POST(2718ms)
Phase: SubmitDone
Ungültige Anforderung (400). 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
Error: (01/04/2026 10:56:51 AM) (Source: CertEnroll) (EventID: 87) (User: NT-AUTORITÄT)
Description: Fehler bei der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-7PAH99J$ über https://IFX-KeyId-d8a3f556085a68c8aa5d5fe079bcc6e9c6d37764.microsoftaik.azure.net/templates/Aik/scep:
SubmitDone
Submit(Request): Bad Request
{"Message":"Attestation statement cannot be verified, rejecting request. TPM firmware needs update."}
HTTP/1.1 400 Bad Request
Date: Sun, 04 Jan 2026 09:56:50 GMT
Content-Length: 101
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 58ab52e2-d721-4f3b-a69f-976a70f6beef
Methode: POST(8547ms)
Phase: SubmitDone
Ungültige Anforderung (400). 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
Error: (01/04/2026 10:15:31 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-7PAH99J$ über https://IFX-KeyId-d8a3f556085a68c8aa5d5fe079bcc6e9c6d37764.microsoftaik.azure.net/templates/Aik/scep:
GetCACaps
Methode: GET(16ms)
Phase: GetCACaps
Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (01/03/2026 03:52:25 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-7PAH99J$ über https://IFX-KeyId-d8a3f556085a68c8aa5d5fe079bcc6e9c6d37764.microsoftaik.azure.net/templates/Aik/scep:
GetCACaps
Methode: GET(94ms)
Phase: GetCACaps
Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (01/02/2026 01:52:08 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-7PAH99J$ über https://IFX-KeyId-d8a3f556085a68c8aa5d5fe079bcc6e9c6d37764.microsoftaik.azure.net/templates/Aik/scep:
GetCACaps
Methode: GET(15ms)
Phase: GetCACaps
Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (01/01/2026 05:11:35 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-7PAH99J$ über https://IFX-KeyId-d8a3f556085a68c8aa5d5fe079bcc6e9c6d37764.microsoftaik.azure.net/templates/Aik/scep:
GetCACaps
Methode: GET(16ms)
Phase: GetCACaps
Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (01/01/2026 02:11:34 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-7PAH99J$ über https://IFX-KeyId-d8a3f556085a68c8aa5d5fe079bcc6e9c6d37764.microsoftaik.azure.net/templates/Aik/scep:
GetCACaps
Methode: GET(78ms)
Phase: GetCACaps
Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (12/31/2025 10:33:20 PM) (Source: CertEnroll) (EventID: 87) (User: NT-AUTORITÄT)
Description: Fehler bei der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-7PAH99J$ über https://IFX-KeyId-d8a3f556085a68c8aa5d5fe079bcc6e9c6d37764.microsoftaik.azure.net/templates/Aik/scep:
SubmitDone
Submit(Request): Bad Request
{"Message":"Attestation statement cannot be verified, rejecting request. TPM firmware needs update."}
HTTP/1.1 400 Bad Request
Date: Wed, 31 Dec 2025 21:33:20 GMT
Content-Length: 101
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: f0a177b2-ca3e-4eb2-a5fc-aadd5b837abd
Methode: POST(2297ms)
Phase: SubmitDone
Ungültige Anforderung (400). 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
Systemfehler:
=============
Error: (01/04/2026 12:00:33 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT-AUTORITÄT)
Description: Die Zertifizierungsstelle/Schlüssel für den sicheren Start müssen aktualisiert werden. Diese Gerätesignaturinformationen sind hier enthalten.
DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:F23d;OEMModelNumber:Q170M-D3H;OEMModelBaseBoard:Q170M-D3H-CF;OEMModelSystemFamily:Default string;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;
BucketId: 89f33aecfc29e81c14591c9ed947ae2900580226bb9fcbcffa2e6448b96fe9fd
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Error: (01/04/2026 11:55:33 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "WEPHOSTSVC" wurde mit folgendem Fehler beendet:
Bei der Verarbeitung der Steuerungsanforderung ist ein Ausnahmefehler im Dienst aufgetreten.
Error: (01/04/2026 11:55:33 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "workfolderssvc" ist vom Dienst "WSearch" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
Error: (01/04/2026 11:01:32 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT-AUTORITÄT)
Description: Die Zertifizierungsstelle/Schlüssel für den sicheren Start müssen aktualisiert werden. Diese Gerätesignaturinformationen sind hier enthalten.
DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:F23d;OEMModelNumber:Q170M-D3H;OEMModelBaseBoard:Q170M-D3H-CF;OEMModelSystemFamily:Default string;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;
BucketId: 89f33aecfc29e81c14591c9ed947ae2900580226bb9fcbcffa2e6448b96fe9fd
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Error: (01/04/2026 10:56:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "WEPHOSTSVC" wurde mit folgendem Fehler beendet:
Bei der Verarbeitung der Steuerungsanforderung ist ein Ausnahmefehler im Dienst aufgetreten.
Error: (01/04/2026 10:56:32 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "workfolderssvc" ist vom Dienst "WSearch" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
Error: (01/04/2026 10:56:31 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 04.01.2026 um 10:40:16 unerwartet heruntergefahren.
Error: (01/04/2026 10:20:23 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT-AUTORITÄT)
Description: Die Zertifizierungsstelle/Schlüssel für den sicheren Start müssen aktualisiert werden. Diese Gerätesignaturinformationen sind hier enthalten.
DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:F23d;OEMModelNumber:Q170M-D3H;OEMModelBaseBoard:Q170M-D3H-CF;OEMModelSystemFamily:Default string;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;
BucketId: 89f33aecfc29e81c14591c9ed947ae2900580226bb9fcbcffa2e6448b96fe9fd
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Windows Defender:
================
Date: 2026-01-04 10:47:07
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=PUADlManager:Win32/DownloadSponsor&threatid=311978&enterprise=0
Name: PUADlManager:Win32/DownloadSponsor
Schweregrad: Niedrig
Kategorie: Potenziell unerwünschte Software
Pfad: file:_B:\SIK Handy Papa 2024-10-26\EINLADUNGEN - ERREIGNISSE\Downloads\Vollversion_ Adobe InDesign CS2 - CHIP Installer _RbW9v.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: DESKTOP-7PAH99J\Horst
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.443.499.0, AS: 1.443.499.0, NIS: 1.443.499.0
Modulversion: AM: 1.1.25110.1, NIS: 1.1.25110.1
Date: 2026-01-03 22:07:37
Description:
Microsoft Defender Antivirus ςċπ нăş взéй ţôφρēδ ьëθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{E94A7685-C249-4221-81AB-77B4ADF1AC49}%ń %ţЅ˘ąη Τўρê:%вAntimalware%п %ţćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ ҐεŞòŋ:%ъЅćн℮δύŀëđ ѕčċй щą ŝķïρрĕδ ъеċǻúşε ťĥě łάѕτ śυсĉĕѕџļ ѕ˘āη ώŞŝ ẃĩτћïл ţħе ℓşт 7 ďαуŝ
Date: 2026-01-03 17:48:54
Description:
Microsoft Defender Antivirus ςċπ нăş взéй ţôφρēδ ьëθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{70691BE9-230C-4E04-B0CC-9D51D120065D}%ń %ţЅ˘ąη Τўρê:%вAntimalware%п %ţćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ ҐεŞòŋ:%ъŔΡ ĉοñηĕċţīōп ґůňďöẃň
Date: 2026-01-03 17:43:02
Description:
Microsoft Defender Antivirus ςċπ нăş взéй ţôφρēδ ьëθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{F968E42E-DC9B-45A4-95D8-2B507F3344B8}%ń %ţЅ˘ąη Τўρê:%вAntimalware%п %ţćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ ҐεŞòŋ:%ъŔΡ ĉοñηĕċţīōп ґůňďöẃň
Date: 2026-01-03 17:35:13
Description:
Microsoft Defender Antivirus ςċπ нăş взéй ţôφρēδ ьëθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{F9CDF4EB-AB6F-453F-8031-DBE1C6BE3384}%ń %ţЅ˘ąη Τўρê:%вAntimalware%п %ţćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ ҐεŞòŋ:%ъŔΡ ĉοñηĕċţīōп ґůňďöẃň
CodeIntegrity:
===============
Date: 2025-12-22 21:49:59
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
BIOS: American Megatrends Inc. F23d 02/26/2018
Hauptplatine: Gigabyte Technology Co., Ltd. Q170M-D3H-CF
Prozessor: Intel(R) Core(TM) i5-6600 CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 36%
Installierter physikalischer RAM: 16254.36 MB
Verfügbarer physikalischer RAM: 10290.43 MB
Summe virtueller Speicher: 18686.36 MB
Verfügbarer virtueller Speicher: 12918.46 MB
==================== Laufwerke ================================
Drive b: (System 2) (Fixed) (Total:1863.01 GB) (Free:1621.99 GB) (Model: Intenso SSD Sata III) NTFS
Drive c: (Windows 10) (Fixed) (Total:475.55 GB) (Free:15.75 GB) (Model: SAMSUNG MZ7LN512HMJP-00000) NTFS
Drive m: (INTERN 1) (Fixed) (Total:1862.89 GB) (Free:245.71 GB) (Model: TOSHIBA DT01ACA200) NTFS
Drive z: (EXTERN 0_07.2024_SIKO Foto) (Fixed) (Total:3726.01 GB) (Free:1666.71 GB) (Model: ST4000VX016-3CV104) NTFS
\\?\Volume{805e9cde-1aee-4c53-979f-187b074f8ebc}\ (Wiederherstellung) (Fixed) (Total:0.44 GB) (Free:0.42 GB) NTFS
\\?\Volume{c9c68501-a3db-42c9-a724-a85d64a5765c}\ () (Fixed) (Total:0.84 GB) (Free:0.18 GB) NTFS
\\?\Volume{f27c94eb-b936-4157-8d17-76852eb05c9f}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 3726 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 476.9 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 2 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 3 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 34F748A4)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt =======================
1. Windows Update hatte ich am 21.12. auf auto gestellt - trotzdem konnte ich heute das neueste Update manuell aufspielen. Aber evtl. war der Rechner noch weiter hinten in der Warteschlange. 2. Hibernation-Modus nicht im Startmenü vorhanden. In den Energieeinstellungen eingeschaltet, benutzt - nach Wiederhochfahren wieder weg. Dafür kommt beim Hochfahren immer die Admin-Frage ob die Energieeinstellungen gestartet werden dürfen. 3. Rem-VBSworm heruntergeladen um eine vorher an diesen PC angeschlossene externe USB-Festplatte zu prüfen (alle externen USB-Geräte außer WLAN-Stick, Handy für USB-Tethering und Dongle für Tastatur und Maus hatte ich entfernt). Beim Start kam die Defender-Meldung daß zum Smartscreen keine Verbindung aufgenommen werden kann. Merkwürdige Beobachtung: Unten in der Meldung gibt es die beiden Buttons "nicht ausführen" und "Laufen". Das zweite klingt wie eine schlechte Übersetzung aus dem Chinesischen. Ist das echt? Ich hoffe die Infos sind hilfreich. Vielen Dank schonmal im Voraus für Eure Hilfe! |
|
04.01.2026, 14:02
| #3 |
| /// TB-Ausbilder   | Win 10 : WLAN-USB-Sticks nicht migriert - WLAN-Verbindung kann kurz etabliert werden, bricht dann wieder ab Mein Name ist Matthias und ich werde dir bei der Analyse und Bereinigung deines Systems helfen. Ich denke nicht, dass das Problem mit dem WLAN-USB-Stick an Malware liegt. Allerdings befindet sich Adware und PUP auf deinem System. Darum sollten wir uns kümmern. Eine kurze Information vorab:  Downloadquellen Die folgenden Seiten verteilen Software häufig mit einem sog. "Installer", mit dem Potentiell Unerwünschte Programme (PUP) oder Adware installiert werden können. WARNUNG!!! Vermeide unbedingt die folgenden Seiten:
Lade Software immer direkt beim jeweiligen Hersteller / Entwickler. Alternative: Für Windows gibt es seit einiger Zeit einen brauchbaren Paketmanager, der mit einfachen Befehlen es erlaubt, automatisiert Software herunterzuladen und zu installieren. Das erspart eine Menge Arbeit, denn ohne einen Paketmanager muss man jedes Programm selbst prüfen und separat manuell updaten, vorher manuell noch runterladen etc. pp. - siehe auch --> chocolatey Paketmanager für Windows Wir empfehlen dringend, alle Programme, sofern verfügbar, über chocolatey zu installieren. Falls du schon mit Linux zu tun hattest, wird dir die Syntax sehr vertraut sein. Die FAQs zu choco findest du da --> Chocolatey: Häufig gestellte Fragen (englisch) Selbstverständlich darfst du auch Fragen zu chocolatey im o.g. Thread zu chocolatey stellen. Schritt 1 - AdwCleaner Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei. Schritt 2 - MBAM Führe Malwarebytes' AntiMalware (MBAM) gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei. Schritt 3 - Neuer FRST-Scan
Geändert von M-K-D-B (04.01.2026 um 14:10 Uhr) |
|
05.01.2026, 22:03
| #4 |
| | AdwCleaner Resultate Hallo Matthias, vielen herzlichen Dank für Deine rasche Antwort. Leider habe ich erst jetzt wieder Zugriff auf den infizierten Rechner. Der AdwCleaner hat 70 (!) problematische Dinge gefunden. Hier sind die beiden Logdateien: AdwCleaner[C00].txt Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.7.0.619
# -------------------------------
# Build: 12-17-2025
# Database: 2025-12-16.1 (Cloud)
# Support: https://help.malwarebytes.com/
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-05-2026
# Duration: 00:00:02
# OS: Windows 10 (Build 19045.6466)
# Cleaned: 68
# Failed: 2
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
Deleted C:\Program Files (x86)\Lavasoft\Web Companion
Deleted C:\ProgramData\Digital Protection Services S.R.L
Deleted C:\ProgramData\IObit\Advanced SystemCare
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Plus Player
Deleted C:\Users\Horst\AppData\LocalLow\IObit\Advanced SystemCare
Deleted C:\Users\Horst\AppData\Roaming\DESKTOPICONAMAZON
Deleted C:\Users\Horst\AppData\Roaming\IObit\Advanced SystemCare
Deleted C:\Users\Horst\AppData\Roaming\OpenOffice Updater
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKCU\SOFTWARE\27ce9fa05c3947dc99ac7a6bd52f3e16
Deleted HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS|AppMaster.exe
Deleted HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION|AppMaster.exe
Deleted HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING|AppMaster.exe
Deleted HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_NINPUT_LEGACYMODE|AppMaster.exe
Deleted HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM|AppMaster.exe
Deleted HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{C424171E-592A-415A-9EB1-DFD6D95D3530}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|OpenOffice Updater
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\dospop.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\incredibar.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Run|OpenOffice Updater
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\OpenOffice Updater
Deleted HKCU\Software\OpenOffice Updater
Deleted HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Deleted HKLM\Software\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
Deleted HKLM\Software\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Deleted HKLM\Software\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Deleted HKLM\Software\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Deleted HKLM\Software\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Deleted HKLM\Software\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Deleted HKLM\Software\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Deleted HKLM\Software\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Deleted HKLM\Software\Classes\TypeLib\{81CA8FCD-1420-4A07-B47D-B30F3DDA79E1}
Deleted HKLM\Software\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Deleted HKLM\Software\Classes\TypeLib\{A520B992-6390-4231-9C89-F06B3587AB80}
Deleted HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|ProductUpdater
Deleted HKLM\Software\VLCPP
Deleted HKLM\Software\Wow6432Node\IOBIT\ASC
Deleted HKLM\Software\Wow6432Node\IObit\Advanced SystemCare
Deleted HKLM\Software\Wow6432Node\IObit\RealTimeProtector
Deleted HKLM\Software\Wow6432Node\VLCPP
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\NCTAudioCDGrabber2.DLL
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{81CA8FCD-1420-4A07-B47D-B30F3DDA79E1}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{A520B992-6390-4231-9C89-F06B3587AB80}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C424171E-592A-415A-9EB1-DFD6D95D3530}
Deleted HKLM\Software\qdu-pr
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\dospop.com
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\incredibar.com
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\dospop.com
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\incredibar.com
Not Deleted HKLM\Software\Microsoft\Internet Explorer\Toolbar|{C424171E-592A-415A-9EB1-DFD6D95D3530}
Not Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\Toolbar|{C424171E-592A-415A-9EB1-DFD6D95D3530}
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [9142 octets] - [05/01/2026 21:21:49]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.7.0.619
# -------------------------------
# Build: 12-17-2025
# Database: 2025-12-16.1 (Cloud)
# Support: https://help.malwarebytes.com/
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 01-05-2026
# Duration: 00:00:51
# OS: Windows 10 (Build 19045.6466)
# Scanned: 32084
# Detected: 71
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
PUP.Optional.AdvancedSystemCare C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare C:\ProgramData\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare C:\Users\Horst\AppData\LocalLow\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare C:\Users\Horst\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.Fake.OpenOfficeUpdater C:\Users\Horst\AppData\Roaming\OpenOffice Updater
PUP.Optional.Legacy C:\Users\Horst\AppData\Roaming\DESKTOPICONAMAZON
PUP.Optional.QuickDriverUpdater C:\ProgramData\Digital Protection Services S.R.L
PUP.Optional.VLCPlusPlayer.DE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Plus Player
PUP.Optional.WebCompanion C:\Program Files (x86)\Lavasoft\Web Companion
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
PUP.Adware.Heuristic HKCU\SOFTWARE\27ce9fa05c3947dc99ac7a6bd52f3e16
PUP.Optional.AdvancedSystemCare HKLM\Software\Wow6432Node\IOBIT\ASC
PUP.Optional.AdvancedSystemCare HKLM\Software\Wow6432Node\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare HKLM\Software\Wow6432Node\IObit\RealTimeProtector
PUP.Optional.AppMaster HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS|AppMaster.exe
PUP.Optional.AppMaster HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION|AppMaster.exe
PUP.Optional.AppMaster HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING|AppMaster.exe
PUP.Optional.AppMaster HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_NINPUT_LEGACYMODE|AppMaster.exe
PUP.Optional.AppMaster HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM|AppMaster.exe
PUP.Optional.Fake.OpenOfficeUpdater HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|OpenOffice Updater
PUP.Optional.Fake.OpenOfficeUpdater HKCU\Software\Microsoft\Windows\CurrentVersion\Run|OpenOffice Updater
PUP.Optional.Fake.OpenOfficeUpdater HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\OpenOffice Updater
PUP.Optional.Fake.OpenOfficeUpdater HKCU\Software\OpenOffice Updater
PUP.Optional.FreeMakeConverter HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|ProductUpdater
PUP.Optional.Legacy HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{C424171E-592A-415A-9EB1-DFD6D95D3530}
PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion
PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C424171E-592A-415A-9EB1-DFD6D95D3530}
PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C424171E-592A-415A-9EB1-DFD6D95D3530}
PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\dospop.com
PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\incredibar.com
PUP.Optional.Legacy HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
PUP.Optional.Legacy HKLM\Software\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
PUP.Optional.Legacy HKLM\Software\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}
PUP.Optional.Legacy HKLM\Software\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
PUP.Optional.Legacy HKLM\Software\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
PUP.Optional.Legacy HKLM\Software\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
PUP.Optional.Legacy HKLM\Software\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
PUP.Optional.Legacy HKLM\Software\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
PUP.Optional.Legacy HKLM\Software\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
PUP.Optional.Legacy HKLM\Software\Classes\TypeLib\{81CA8FCD-1420-4A07-B47D-B30F3DDA79E1}
PUP.Optional.Legacy HKLM\Software\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
PUP.Optional.Legacy HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C424171E-592A-415A-9EB1-DFD6D95D3530}
PUP.Optional.Legacy HKLM\Software\Microsoft\Internet Explorer\Toolbar|{C424171E-592A-415A-9EB1-DFD6D95D3530}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\AppID\NCTAudioCDGrabber2.DLL
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\TypeLib\{81CA8FCD-1420-4A07-B47D-B30F3DDA79E1}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C424171E-592A-415A-9EB1-DFD6D95D3530}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\Toolbar|{C424171E-592A-415A-9EB1-DFD6D95D3530}
PUP.Optional.Legacy HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\dospop.com
PUP.Optional.Legacy HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\incredibar.com
PUP.Optional.Legacy HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\dospop.com
PUP.Optional.Legacy HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\incredibar.com
PUP.Optional.QuickDriverUpdater HKLM\Software\qdu-pr
PUP.Optional.ReviverSoft HKLM\Software\Classes\TypeLib\{A520B992-6390-4231-9C89-F06B3587AB80}
PUP.Optional.ReviverSoft HKLM\Software\Wow6432Node\\Classes\TypeLib\{A520B992-6390-4231-9C89-F06B3587AB80}
PUP.Optional.VLCPlusPlayer.DE HKLM\Software\VLCPP
PUP.Optional.VLCPlusPlayer.DE HKLM\Software\Wow6432Node\VLCPP
PUP.Optional.WebCompanion HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
PUP.Optional.WebCompanion HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
PUP.Optional.WebCompanion HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Hosts File Entries ] *****
No malicious hosts file entries found.
***** [ Preinstalled Software ] *****
Preinstalled.CyberLinkShellExtension Registry HKLM\Software\Classes\CLSID\{3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2}
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########
hier noch der MBAM Scan-Bericht. Viele Grüße, Jörg Code:
ATTFilter Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 05.01.2026
Scan-Zeit: 21:40
Protokolldatei: d34e8cb2-ea76-11f0-9716-408d5cb15b29.json
-Softwaredaten-
Version: 5.4.5.226
Komponentenversion: 146.0.5441
Version des Aktualisierungspakets: 1.0.106143
Lizenz: Testversion
-Systemdaten-
Betriebssystem: Windows 10 (Build 19045.6466)
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-7PAH99J\Horst
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 313788
Erkannte Bedrohungen: 51
In die Quarantäne verschobene Bedrohungen: 51
Abgelaufene Zeit: 17 Min., 29 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 2
PUP.Optional.DriverMax, HKLM\SOFTWARE\WOW6432NODE\INNOVATIVE SOLUTIONS\DriverMax, In Quarantäne, 4377, 811917, 1.0.106143, , ame, , ,
PUP.Optional.DriverMax, HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\INNOVATIVE SOLUTIONS\DriverMax, In Quarantäne, 4377, 811919, 1.0.106143, , ame, , ,
Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 5
PUP.Optional.DriverMax, C:\PROGRAM FILES (X86)\INNOVATIVE SOLUTIONS\DRIVERMAX, In Quarantäne, 4377, 812207, 1.0.106143, , ame, , ,
PUP.Optional.DriverMax, C:\USERS\HORST\APPDATA\LOCAL\INNOVATIVE SOLUTIONS\DRIVERMAX, In Quarantäne, 4377, 812461, 1.0.106143, , ame, , ,
PUP.Optional.DriverMax, C:\USERS\HORST\APPDATA\ROAMING\INNOVATIVE SOLUTIONS\DRIVERMAX, In Quarantäne, 4377, 812462, 1.0.106143, , ame, , ,
PUP.Optional.StartPage, C:\USERS\HORST\APPDATA\LOCAL\MICROSOFT\EDGE\USER DATA\Default\Sync Data\LevelDB, In Quarantäne, 78, 1089829, 1.0.106143, , ame, , ,
PUP.Optional.StartPage, C:\USERS\HORST\APPDATA\LOCAL\MICROSOFT\EDGE\USER DATA\Default\Sync Data\LevelDB, In Quarantäne, 78, 1089830, 1.0.106143, , ame, , ,
Datei: 44
PUP.Optional.SearchEngineOptimizer, C:\$RECYCLE.BIN\S-1-5-21-947909773-2885354443-2675781160-1001\$R0NI876\SEO.EXE, In Quarantäne, 5874, 1299817, 1.0.106143, , ame, , C36F32EF1A0AD22C1C771A368906494E, C73C578DA2DF1D239AC3CD848109D436CDEF964CC48FF3DFE04714AB7E7377BD
PUP.Optional.WebCompanion, C:\$RECYCLE.BIN\S-1-5-21-947909773-2885354443-2675781160-1001\$R5G1Z7O\LAVASOFT.WCASSISTANT.WINSERVICE.EXE, In Quarantäne, 4862, 1219671, 1.0.106143, , ame, , FCB02DD8FE263246A2BC79E4B9B4875E, A47472E7F857EE97B36E1294FB5AD139F0BE05A7D10CB3662052A61D72ABCEC0
PUP.Optional.SearchEngineOptimizer, C:\$RECYCLE.BIN\S-1-5-21-947909773-2885354443-2675781160-1001\$R0NI876\UNINSTALL.EXE, In Quarantäne, 5874, 1299817, 1.0.106143, , ame, , 3A450A1A3B73CD18265F6FCF91B55506, DE0912B303BBBB870FC5D30D352DACC71D994A05B786EE99635AB7C8406BD62C
PUP.Optional.BundleInstaller, B:\SIK HANDY PAPA 2024-10-26\EINLADUNGEN - ERREIGNISSE\DOWNLOADS\VOLLVERSION_ ASHAMPOO SNAP 16 - CHIP INSTALLER _3IQ6V.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.BundleInstaller, B:\SIK HANDY PAPA 2024-10-26\EINLADUNGEN - ERREIGNISSE\DOWNLOADS\VOLLVERSION_ WISE CARE 365 PRO - CHIP INSTALLER _XSV6V.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.BundleInstaller, B:\SIK HANDY PAPA 2024-10-26\EINLADUNGEN - ERREIGNISSE\DOWNLOADS\WRSETUP (1).EXE, In Quarantäne, 82, 1137222, 1.0.106143, , ame, , 1872229E6B90011742E0669504CC15A3, E1777C300861BFD8BC925D9FFF949A62257FAC1D3BDBD06325A534692AAB3762
PUP.Optional.ChipDe, B:\SIK HANDY PAPA 2024-10-26\EINLADUNGEN - ERREIGNISSE\DOWNLOADS\VOLLVERSION_ ADOBE INDESIGN CS2 - CHIP INSTALLER _RBW9V.EXE, In Quarantäne, 2745, 562568, 1.0.106143, , ame, , F5980F17F44DA870072C5CE396EB01BF, 2F9079DF89E96A997A910F9243173AC60BFE625501452152F8AB281778E5696B
PUP.Optional.BundleInstaller, B:\SIK HANDY PAPA 2024-10-26\EINLADUNGEN - ERREIGNISSE\DOWNLOADS\VOLLVERSION_ BECKERCAD 12 3D - CHIP INSTALLER _FHW6V.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.BundleInstaller, B:\SIK HANDY PAPA 2024-10-26\EINLADUNGEN - ERREIGNISSE\DOWNLOADS\WRSETUP.EXE, In Quarantäne, 82, 1137222, 1.0.106143, , ame, , 1872229E6B90011742E0669504CC15A3, E1777C300861BFD8BC925D9FFF949A62257FAC1D3BDBD06325A534692AAB3762
PUP.Optional.BundleInstaller, B:\SIK HANDY PAPA 2024-10-26\EINLADUNGEN - ERREIGNISSE\DOWNLOADS\VOLLVERSION_ 3-IN1-PAKET F\u00c3\u00bcR SCHWARZ-WEI\u00c3\u009f-FOTOGRAFIE - CHIP INSTALLER _OIW6V.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.BundleInstaller, B:\SIK HANDY PAPA 2024-10-26\EINLADUNGEN - ERREIGNISSE\DOWNLOADS\VOLLVERSION_ ADOBE INDESIGN CS2 - CHIP INSTALLER _5OFRV.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.BundleInstaller, B:\SIK HANDY PAPA 2024-10-26\EINLADUNGEN - ERREIGNISSE\DOWNLOADS\VOLLVERSION_ NERO AI IMAGE UPSCALER PRO 365 - CHIP INSTALLER _54W6V.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.BundleInstaller, C:\PROGRAM FILES (X86)\FALCO BILLIARD\GAME.EXE, In Quarantäne, 82, 1214487, 1.0.106143, , ame, , 6FFC2812F9E4048FD38B5E590536631E, 48281CC7837D22302280E202702C81832371B5249442B783B656C52E313A8A86
PUP.Optional.ChipDe, C:\USERS\HORST\DOCUMENTS\PHOTOSHOP VORLAGENPAKET - CHIP INSTALLER _ZAD0X.EXE, In Quarantäne, 2745, 562568, 1.0.106143, , ame, , F5980F17F44DA870072C5CE396EB01BF, 2F9079DF89E96A997A910F9243173AC60BFE625501452152F8AB281778E5696B
PUP.Optional.StartPage, C:\USERS\HORST\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Ersetzt, 78, 1089829, 1.0.106143, , ame, , 39E482493E73D825C50E3DDAB05CEEB8, F817E6BE6C02E403896BDD3DEE1197E89F71BD73C3FEA2749F81854A62D31066
PUP.Optional.StartPage, C:\USERS\HORST\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Ersetzt, 78, 1089830, 1.0.106143, , ame, , 39E482493E73D825C50E3DDAB05CEEB8, F817E6BE6C02E403896BDD3DEE1197E89F71BD73C3FEA2749F81854A62D31066
PUP.Optional.StartPage, C:\USERS\HORST\APPDATA\LOCAL\MICROSOFT\EDGE\USER DATA\Default\Web Data, Ersetzt, 78, 1089829, 1.0.106143, , ame, , 06E80D3163CDCDBD78238040D13C2D49, 2A4EDF0A984D54F0E11855C7058E74E654FE8AD80FE18317E4C6FAF2B3FD355F
PUP.Optional.StartPage, C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000005.ldb, In Quarantäne, 78, 1089829, 1.0.106143, , ame, , 14245AF5CF50572507F7E00D2AF35D16, 1FA016EF22AFC2C9C55625FA90FDB9E99A6BBA4F9BF60BAF6114E141565ABB4F
PUP.Optional.StartPage, C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\004678.ldb, In Quarantäne, 78, 1089829, 1.0.106143, , ame, , 9DECBCC7D101CB1F137672BE75251CAC, 6B0DEFD1293B42644925AD6DDF9B650DA6055343F4EEB37C7B7B4BB3FA62CDB0
PUP.Optional.StartPage, C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\004681.ldb, In Quarantäne, 78, 1089829, 1.0.106143, , ame, , DF980345B15198754E602147FD31112A, 8BBCE4DB5A17E5702D093107E426E1D21ECAA4239C3701D4281536C523A6AEAA
PUP.Optional.StartPage, C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\004682.log, In Quarantäne, 78, 1089829, 1.0.106143, , ame, , FF5174DAF48247C018AFBC57C97F5B60, 70EDECD3904241C27A943C131FEED35BF5BFA232D4F7302453A7DF8ABD65B597
PUP.Optional.StartPage, C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\004683.ldb, In Quarantäne, 78, 1089829, 1.0.106143, , ame, , E94F2E3F1AD7F9F52576F788A831C130, 5D14098085797A83F1058BF028B126E25C7599412BFDF2BDAD6DDC87955575DD
PUP.Optional.StartPage, C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\CURRENT, In Quarantäne, 78, 1089829, 1.0.106143, , ame, , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
PUP.Optional.StartPage, C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOCK, In Quarantäne, 78, 1089829, 1.0.106143, , ame, , ,
PUP.Optional.StartPage, C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG, In Quarantäne, 78, 1089829, 1.0.106143, , ame, , 3CBC2DB3C742F4A6C751ABE19A0F6D13, 155E65398ADF9910CFE8BA5A928A3F5BFFAA18714828FD8FD84107E631B2A2DE
PUP.Optional.StartPage, C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old, In Quarantäne, 78, 1089829, 1.0.106143, , ame, , 494934CE22D6F4A0817B68CCCE773526, DE44293FE41C19CFBEF7DEDBDD5D21D53FFE03A1928C77E6E3D4116670C46864
PUP.Optional.StartPage, C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, In Quarantäne, 78, 1089829, 1.0.106143, , ame, , BE6A1BBA2E7242D5C7D56CE584F72CFA, 1D3B3743A6C383A5CBCE81BDE5F3E4EA60CC0E4488169A1972E8565C1FC67B57
PUP.Optional.StartPage, C:\USERS\HORST\APPDATA\LOCAL\MICROSOFT\EDGE\USER DATA\Default\Web Data, Ersetzt, 78, 1089830, 1.0.106143, , ame, , 06E80D3163CDCDBD78238040D13C2D49, 2A4EDF0A984D54F0E11855C7058E74E654FE8AD80FE18317E4C6FAF2B3FD355F
PUP.Optional.OneStart, C:\USERS\HORST\DOCUMENTS\FONTS\ONESTARTPDFDIRECT.MSI, In Quarantäne, 8147, 1288056, 1.0.106143, , ame, , E5869064F95AA66ED6929D8F80706200, 7D5E85DBDBF85ED033BE48F7EF38EF438BE15DB869B2950A359F9E23CC1F58CB
PUP.Optional.BundleInstaller, C:\USERS\HORST\DOCUMENTS\VOLLVERSION_ BECKERCAD 12 3D - CHIP INSTALLER _FHW6V.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.BundleInstaller, C:\USERS\HORST\DOCUMENTS\VOLLVERSION_ AUDIALS VISION 2026 SE - CHIP INSTALLER _PDERV.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.ChipDe, C:\USERS\HORST\DOCUMENTS\VOLLVERSION_ GOOGLE EARTH PRO - CHIP INSTALLER _E5NAV.EXE, In Quarantäne, 2745, 562568, 1.0.106143, , ame, , F5980F17F44DA870072C5CE396EB01BF, 2F9079DF89E96A997A910F9243173AC60BFE625501452152F8AB281778E5696B
PUP.Optional.BundleInstaller, C:\USERS\HORST\DOCUMENTS\7-ZIP (64 BIT) - CHIP INSTALLER _SUDJV.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.BrowserHijack, C:\USERS\HORST\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 10305, 1361636, 1.0.106143, , ame, , 753FAD6B0D364CAD0CF00BF2D9E0C7A2, 72CC6359C9F8B1A3F77F3F1128B329950594AC369B09479BEA25793E3888550B
PUP.Optional.BrowserHijack, C:\USERS\HORST\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Ersetzt, 10305, 1361723, 1.0.106143, , ame, , 39E482493E73D825C50E3DDAB05CEEB8, F817E6BE6C02E403896BDD3DEE1197E89F71BD73C3FEA2749F81854A62D31066
PUP.Optional.BundleInstaller, C:\USERS\HORST\DOCUMENTS\VOLLVERSION_ AUTODESK SKETCHBOOK - CHIP INSTALLER _OZ0XV.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.StartPage, C:\USERS\HORST\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Ersetzt, 78, 1089829, 1.0.106143, , ame, , 39E482493E73D825C50E3DDAB05CEEB8, F817E6BE6C02E403896BDD3DEE1197E89F71BD73C3FEA2749F81854A62D31066
PUP.Optional.BrowserHijack, C:\USERS\HORST\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Ersetzt, 10305, 1361636, 1.0.106143, , ame, , 39E482493E73D825C50E3DDAB05CEEB8, F817E6BE6C02E403896BDD3DEE1197E89F71BD73C3FEA2749F81854A62D31066
PUP.Optional.BrowserHijack, C:\USERS\HORST\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 10305, 1361723, 1.0.106143, , ame, , 753FAD6B0D364CAD0CF00BF2D9E0C7A2, 72CC6359C9F8B1A3F77F3F1128B329950594AC369B09479BEA25793E3888550B
PUP.Optional.OneStart, C:\USERS\HORST\DOCUMENTS\FONTS\ONESTARTINSTALLER-V5.5.244.0.MSI, In Quarantäne, 8147, 1288056, 1.0.106143, , ame, , 40170AC9A14FFDDE99A72AE6DF444287, C826B208E30168A7CCF9FB34A18927D60C6A4686BC5E84076216217EE9D7D3FB
PUP.Optional.BundleInstaller, C:\USERS\HORST\DOCUMENTS\KRITA STUDIO - CHIP INSTALLER _YZ0XV.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.ChipDe, C:\USERS\HORST\DOCUMENTS\VOLLVERSION_ ADOBE ILLUSTRATOR CS2 - CHIP INSTALLER _VAFEV.EXE, In Quarantäne, 2745, 562568, 1.0.106143, , ame, , F5980F17F44DA870072C5CE396EB01BF, 2F9079DF89E96A997A910F9243173AC60BFE625501452152F8AB281778E5696B
PUP.Optional.BundleInstaller, C:\USERS\HORST\DOCUMENTS\VOLLVERSION_ BACKUP MAKER PROFESSIONAL - CHIP INSTALLER _HEJ6V.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
PUP.Optional.BundleInstaller, C:\USERS\HORST\DOCUMENTS\VOLLVERSION_ DEEP ART CREATOR - KI-BILDGENERATOR - CHIP INSTALLER _35VFV.EXE, In Quarantäne, 82, 1367328, 1.0.106143, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
WMI: 0
(keine bösartigen Elemente erkannt)
(end)
|
|
05.01.2026, 22:18
| #5 | |
| /// TB-Ausbilder | Win 10 : WLAN-USB-Sticks nicht migriert - WLAN-Verbindung kann kurz etabliert werden, bricht dann wieder ab Servus Jörg, vielen Dank für die Logdateien. Ja, auf diesem Rechner ist ziemlich viel Junkware.  Ich bräuchte noch die beiden neuen Logdateien von FRST (siehe Schritt 3 meines letzten Posts). Dann können wir weitermachen.  Zitat:
|
|
05.01.2026, 22:43
| #6 |
| | FRST Resultat Teil 1 Hallo Matthias, ganz vergessen. Hier kommts. Viele Grüße, Jörg FRST.txt: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20-11-2025
durchgeführt von Horst (Administrator) auf DESKTOP-7PAH99J (Gigabyte Technology Co., Ltd. Q170M-D3H) (05-01-2026 22:28:43)
Gestartet von C:\Users\Horst\Desktop\Wartung\FRST64.exe
Geladene Profile: Horst
Plattform: Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser nicht gefunden!
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Program Files\Opera\125.0.5729.49\opera_crashreporter.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2587.9.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.96\msedgewebview2.exe <6>
(cmd.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxEM.exe
(explorer.exe ->) (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH) C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck_Broker.exe
(explorer.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> WhatsApp.Root) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2587.9.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Program Files\Opera\opera.exe <21>
(Geek Software GmbH -> geek software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(PrintCtrl.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(services.exe ->) () [Datei ist nicht signiert] C:\Windows\System32\atwtusb.exe <2>
(services.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (AIC Semiconductor (Shanghai) Co., Ltd. -> AIC Semiconductor) C:\Program Files\Ugreen\AicWifiService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\IntelCpHeciSvc.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.22342.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Opera Norway AS -> Opera Software) C:\Program Files\Opera\autoupdate\opera_autoupdate.exe <2>
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [PrintDisp] => C:\WINDOWS\system32\PrintDisp.exe [595080 2019-03-21] (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [MacrokeyManager] => C:\WINDOWS\system32\WTMKM.exe [7329792 2011-06-01] () [Datei ist nicht signiert]
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [10752424 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18381792 2017-06-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1690368 2022-07-22] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [LogiBolt] => C:\Program Files\Logi\LogiBolt\LogiBolt.exe [22423104 2021-12-14] (Logitech Inc -> Logitech)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Ashampoo Backup] => "C:\Program Files\Ashampoo\Ashampoo Backup 2023\bin\backupClient-ab.exe" --hidden (Keine Datei)
HKLM\...\Run: [Ashampoo Backup PB] => C:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\backupClient-abpb.exe [955240 2023-12-05] (Ashampoo GmbH & Co. KG -> )
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [455968 2023-05-25] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Run: [PDF24] => B:\Programme\PDF24\pdf24.exe [669920 2025-06-23] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [PDF24] => C:\Program Files (x86)\PDF24\pdf24.exe [576224 2025-09-15] (Geek Software GmbH -> geek software GmbH)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ACHTUNG
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ACHTUNG
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [] => [X]
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIPGE.EXE [417776 2014-11-14] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIPGE.EXE [417776 2014-11-14] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45741280 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [LogiBolt] => C:\Program Files\Logi\LogiBolt\LogiBolt.exe [22423104 2021-12-14] (Logitech Inc -> Logitech)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [MicrosoftEdgeAutoLaunch_6E2C73815817D7E02B41C013F4C55849] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4228688 2025-12-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [Opera Stable] => C:\Program Files\Opera\opera.exe [2088408 2025-12-22] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [QMxNetworkSync] => C:\Program Files\Common Files\MAGIX Services\Update Notifier\QMxNetworkSync.exe [1027600 2023-05-22] (MAGIX Software GmbH -> MAGIX)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [Spotify] => C:\Users\Horst\AppData\Roaming\Spotify\Spotify.exe [35433288 2025-03-11] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Run: [com.doctolib.pro.desktop] => C:\Program Files\Doctolib\Doctolib.exe [180509488 2024-07-26] (Doctolib SAS -> Doctolib)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\MountPoints2: {bcec7c50-56f3-11ed-b1c9-806e6f6e6963} - "E:\Adobe CS6\Set-up.exe"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Winlogon: [Shell] C:\WINDOWS\explorer.exe [6089584 2025-12-22] (Microsoft Windows -> Microsoft Corporation) <==== ACHTUNG
HKLM\...\Windows x64\Print Processors\ActMaskR: C:\Windows\System32\spool\prtprocs\x64\ActPrint.dll [51848 2018-09-14] (ActMask Group Co., Ltd -> ActMask Co.,Ltd)
HKLM\...\Windows x64\Print Processors\hpcpp103: C:\Windows\System32\spool\prtprocs\x64\hpcpp103.dll [323584 2010-10-13] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP560 series: CNMLMA0.DLL (Keine Datei)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [336896 2009-04-03] (CANON INC.) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\EPSON XP-960 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBPGE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\EverDoc: C:\WINDOWS\system32\mfilemon.dll [972000 2016-02-17] (Open Source Developer, Lorenzo Monti -> Monti Lorenzo)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2025-11-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\143.0.7499.170\Installer\chrmstp.exe [2025-12-27] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\StartRLCMS.lnk [2021-02-24]
ShortcutTarget: StartRLCMS.lnk -> C:\ProgramData\Reallusion\RLRunUtility.exe (Reallusion Inc. -> )
BootExecute: autocheck autochk * bddel.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1A6AE2FB-C6E6-4320-B8E8-576D227C9E04} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {DB83630F-E04C-4DF1-AE07-E3A08F471FC4} - \FreeDownloadManagerNetworkMonitor -> Keine Datei <==== ACHTUNG
Task: {097F5BEC-6A24-448D-9255-3E9963341D8A} - System32\Tasks\{0882A554-C370-450E-BEA8-6C820776BEBB} => C:\Windows\System32\pcalua.exe [91136 2025-12-22] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files (x86)\Adobe\Acrobat8\Adobe Acrobat 8 Professional\instmsia.exe" -d "C:\Program Files (x86)\Adobe\Acrobat8\Adobe Acrobat 8 Professional"
Task: {45566E1D-9E2B-447E-A4FB-E0D8D0621779} - System32\Tasks\{379498D6-842E-44B9-B87D-06A708419469} => C:\Windows\System32\pcalua.exe [91136 2025-12-22] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Users\Horst\Downloads\APRO23_Win_ESD1_WWEFG.exe -d C:\Users\Horst\Downloads
Task: {0BE90A69-C33D-4C38-BC7D-B5EAAD27F8EA} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-7PAH99J-Horst => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {B42EDF9F-F32D-4E30-AB6F-E88CF0059F44} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [10752424 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {51F44CB4-2023-475C-824D-5EF6D42DB0C2} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [11065256 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {C012D1EB-A351-4A91-9F2C-223A0C7161D6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {9ECC77DF-A90B-4E1B-80F7-188C8390619F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {62AB8A58-3AF0-4F6E-8DF9-DE128F404031} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "1e4c18f7-3906-405b-934e-816f7137dc7f" --version "6.38.0.11537" --silent
Task: {10C01E53-9628-4F59-BF0D-DB4A6EDC2FFF} - System32\Tasks\CCleanerSkipUAC - Horst => C:\Program Files\CCleaner\CCleaner.exe [39575776 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {64700C20-8F60-44B1-9E1C-39DFA6998F45} - System32\Tasks\EPSON XP-960 Series Update {EEA69949-4F01-4179-8AA6-3B8FC338600E} => C:\Windows\System32\spool\drivers\x64\3\E_YTSPGE.EXE [690536 2013-11-21] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Task: {762A5246-5556-4A8B-8132-59E4094E6897} - System32\Tasks\GMX Update => C:\Users\Horst\AppData\Local\1&1 Mail & Media GmbH\MCDS\1\Application\1\GMX_Update.exe [1467320 2021-04-20] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Task: {39F54204-4FFC-47CE-B968-0767A9B1F565} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.4{355534B7-F9CB-4F05-BD58-1FB49FEFDA4B} => C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.4\updater.exe [7056536 2025-12-08] (Google LLC -> Google LLC)
Task: {27DC19EB-2DF5-4D25-86F6-7E86BE21A2BF} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [11507504 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {648224D2-F2DA-4A4E-A0D4-8D912799CB57} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28946240 2025-12-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {8D455488-DB27-4886-A3FC-AE58ED370DB8} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\opushutil.exe [61728 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {4E7B3555-3E08-4099-B317-E7C1D5E2F872} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28946240 2025-12-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {53EE5140-04B4-4E25-A03C-E7EE18C1B621} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [230656 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {2BCB6923-EF1D-470C-A1DC-58AE21358096} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [230656 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {DD687DA7-3338-47B0-AFB9-C92B69375374} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [11507504 2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {9080701E-47AE-4DA5-B0A2-9573112709ED} - System32\Tasks\NCH Software\MixPadUpdateCheck => C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe [10931200 2025-11-24] (NCH Software, Inc. -> NCH Software)
Task: {EA7B1BAB-3A10-44FF-90BD-6E5A748C770B} - System32\Tasks\NCH Software\SwitchUpdateCheck => C:\Program Files (x86)\NCH Software\Switch\switch.exe [6256632 2025-12-15] (NCH Software, Inc. -> NCH Software)
Task: {383E2531-81BA-4AC7-ADBB-972DB9E5E125} - System32\Tasks\NCH Software\VideoPadCacheDeleteAll => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [15140336 2025-10-10] (NCH Software, Inc. -> NCH Software)
Task: {2A7777B1-2F10-4196-BE3F-E3737F79F729} - System32\Tasks\NCH Software\VideoPadUpdateCheck => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [15140336 2025-10-10] (NCH Software, Inc. -> NCH Software)
Task: {773D90A8-88DE-4D2E-A88E-2C5E55B51A6E} - System32\Tasks\NCH Software\WavePadUpdateCheck => C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe [10205680 2025-12-02] (NCH Software, Inc. -> NCH Software)
Task: {4C34F98E-6AB6-4B42-9880-53F5AFF56214} - System32\Tasks\Opera scheduled assistant Autoupdate 1582821198 => C:\Program Files\Opera\autoupdate\opera_autoupdate.exe [6233560 2025-12-18] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Program Files\Opera\assistant" --producttype=assistant $(Arg0)
Task: {BCD66482-BDC6-488D-8561-BCFF63B89F24} - System32\Tasks\Opera scheduled Autoupdate 1505550991 => C:\Program Files\Opera\autoupdate\opera_autoupdate.exe [6233560 2025-12-18] (Opera Norway AS -> Opera Software)
Task: {2B4826E9-83F0-4EEC-AD6E-B060778107CC} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5751664 2017-05-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {5C6012C4-50A8-48BA-8941-26B0122BE354} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [6191000 2017-05-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {7970172B-21BC-4F02-AFBC-2E844D497B48} - System32\Tasks\SEO => C:\Users\Horst\AppData\Roaming\SEO\SEO.exe (Keine Datei) <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\EPSON XP-960 Series Update {EEA69949-4F01-4179-8AA6-3B8FC338600E}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSPGE.EXE:/EXE:{EEA69949-4F01-4179-8AA6-3B8FC338600E} /F:UpdateWORKGROUP\DESKTOP-7PAH99J$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ACHTUNG (Beschränkung - Zones)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{426751f0-7da5-4fc1-9ed5-96f93f71afc4}: [DhcpNameServer] 192.168.68.204
Tcpip\..\Interfaces\{81597995-380e-4483-8ef9-4e2404d531b7}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{81597995-380e-4483-8ef9-4e2404d531b7}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{a8743275-c269-41a2-b64f-63cba816211a}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{a8743275-c269-41a2-b64f-63cba816211a}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{a8743275-c269-41a2-b64f-63cba816211a}\35F657E6462416273556475707F563335493: [DhcpNameServer] 10.10.10.254
Tcpip\..\Interfaces\{c94ac666-3758-47d9-8756-47598b969e9e}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{c94ac666-3758-47d9-8756-47598b969e9e}: [DhcpDomain] fritz.box
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <==== ACHTUNG
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default [2026-01-05]
Edge DownloadDir: Default -> G:\Downloads
Edge Notifications: Default -> hxxps://de.softonic.com; hxxps://web.whatsapp.com; hxxps://www.chip.de; hxxps://www.computerbild.de; hxxps://www.facebook.com; hxxps://www.mein-schoener-garten.de; hxxps://www.tah.de; hxxps://www.youtube.com
Edge HomePage: Default -> hxxps://
Edge Extension: (Avira Safe Shopping) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\caiblelclndcckfafdaggpephhgfpoip [2025-12-27]
Edge Extension: (Avira Password Manager) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\emgfgdclgfeldebanedpihppahgngnle [2025-03-21]
Edge Extension: (Coole Cursor für Chrome ) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\empjidjbllcmlgaobahepkijkfmfkjdb [2023-07-30]
Edge Extension: (SFL) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\epoipicdijmpedfdkjamnjfgodfjojad [2024-10-05]
Edge Extension: (Google Docs Offline) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-12-20]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2025-12-12]
Edge Extension: (Edge relevant text changes) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge Extension: (The Mist) - C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\npkohagpnckpnhenpjeeggdngjphfgkn [2025-08-26]
Edge Profile: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2025-11-21]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2019-10-23] [] [ist nicht signiert]
FF Plugin: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-01-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-01-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2024-12-12] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corporation -> Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\Program Files (x86)\Common Files\Nero\BrowserPlugin\npBrowserPlugin.dll [2011-07-26] (Nero AG -> Nero AG)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2024-12-12] (Adobe Inc. -> Adobe Systems)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default [2025-12-14]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR HomePage: Default -> hxxps://
CHR StartupUrls: Default -> "hxxps://"
CHR Extension: (Avira Password Manager) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2025-04-18]
CHR Extension: (Avira Safe Shopping) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2025-11-13]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-12-12]
CHR Extension: (Coole Cursor für Chrome ) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\empjidjbllcmlgaobahepkijkfmfkjdb [2024-01-01]
CHR Extension: (SFL) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\epoipicdijmpedfdkjamnjfgodfjojad [2024-10-06]
CHR Extension: (Google Docs Offline) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-11-13]
CHR Extension: (Saferduck) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjdjgnojiionckfmaobhcgeahdndmhgf [2021-08-02]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2025-12-12]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Horst\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-07]
CHR HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\opera.exe
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft, Inc. -> ArcSoft Inc.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2017-09-26] (Adobe Systems) [Datei ist nicht signiert]
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944048 2024-12-12] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [11081128 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AicWifiServiceD80; C:\Program Files\Ugreen\AicWifiService.exe [35352 2024-03-21] (AIC Semiconductor (Shanghai) Co., Ltd. -> AIC Semiconductor)
S3 ashbackuppb; c:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\backupService-abpb.exe [39272 2023-12-05] (Ashampoo GmbH & Co. KG -> )
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-07-18] (Gen Digital Inc. -> Gen Digital Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13419408 2025-12-16] (Microsoft Corporation -> Microsoft Corporation)
S3 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2018-02-16] (Digital Wave Ltd -> Digital Wave Ltd.)
S3 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe [133736 2025-08-27] (Intel Corporation -> Intel)
S3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAUpdateService.exe [133224 2025-08-27] (Intel Corporation -> Intel)
S3 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
S3 GMX_MailCheck_Update; C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck_Update.exe [933784 2022-08-10] (1&1 Mail & Media GmbH -> Pixality Computersysteme GmbH)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2025-12-29] (HP Inc. -> HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-13] (Macrovision Corporation) [Datei ist nicht signiert]
S4 Lightkey Service; C:\Program Files (x86)\Lightkey Sources LTD\Lightkey\LightkeyCentralService.exe [134288 2021-08-15] (LIGHTKEY SOURCES LTD -> LIGHTKEY SOURCES LTD)
S4 LightkeyNeural; C:\Program Files (x86)\Lightkey Sources LTD\Lightkey\LightkeyNeuralService.exe [43648272 2021-08-15] (LIGHTKEY SOURCES LTD -> )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11207664 2026-01-05] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2026-01-05] (Malwarebytes Inc. -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe [2063376 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 NeroBackItUpBackgroundService; C:\Program Files (x86)\Nero\Nero 2017\Nero BackItUp\NBService.exe [287088 2016-08-09] (Nero AG -> Nero AG)
S3 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [Datei ist nicht signiert]
R2 OptionsPlusUpdaterService; C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe [18135808 2023-11-15] (Logitech Inc -> Logitech, Inc.)
S3 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [576224 2025-09-15] (Geek Software GmbH -> geek software GmbH)
S3 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [Datei ist nicht signiert]
S3 RLHostService; C:\Program Files (x86)\Common Files\Reallusion\RLHostService\RLHostService.exe [280072 2021-02-25] (Reallusion Inc. -> Reallusion.Inc)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe [4426832 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe [290704 2025-12-22] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WTService; C:\WINDOWS\system32\atwtusb.exe [916992 2011-04-27] () [Datei ist nicht signiert]
S3 LibreOfficeMaintenance; "B:\Program Files\LibreOffice\program\update_service.exe" [X]
S4 RunSwUSB; C:\Windows\runSW.exe [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 aicloadfw; C:\WINDOWS\System32\drivers\aicloadfw.sys [1060984 2024-05-08] (AIC Semiconductor (Shanghai) Co., Ltd. -> )
R3 aicusbwifi; C:\WINDOWS\System32\drivers\aicusbwifi.sys [1219688 2024-05-13] (AIC Semiconductor (Shanghai) Co., Ltd. -> )
R1 cdrbsdrv; C:\Windows\System32\Drivers\cdrbsdrv.sys [39208 2006-08-25] (B.H.A Corporation -> B.H.A Corporation)
S3 cpuz161; C:\ProgramData\CPUID Software\cpu-z\KICxMQHHatRI [44680 2025-12-22] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [175824 2024-10-17] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps)
S3 DroidCamVideo; C:\WINDOWS\System32\drivers\droidcamvideo.sys [33768 2020-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d.inf_amd64_7e337195b92a35b6\e1d.sys [611936 2023-08-31] (Intel Corporation -> Intel Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae.sys [159296 2026-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-03-14] (Martin Malik - REALiX -> REALiX(tm))
R3 int0800; C:\WINDOWS\System32\drivers\flashud.sys [79624 2022-01-25] (Intel Corporation -> Intel Corporation)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333192 2025-12-22] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234088 2026-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-01-05] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt.sys [212544 2026-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [80984 2026-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245336 2026-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [190096 2026-01-05] (Malwarebytes Inc -> Malwarebytes)
S3 MirayVirtualDisk; C:\WINDOWS\System32\drivers\mvdo.sys [405200 2022-10-14] (Miray Software AG -> Miray)
S3 mmrv-abpb; C:\Program Files\Ashampoo\Ashampoo Backup Pro 17\bin\mmrv-abpb.sys [59424 2023-12-05] (Ashampoo GmbH & Co. KG -> )
R3 moufiltr; C:\WINDOWS\System32\drivers\moufiltr.sys [7680 2009-03-08] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
S3 NewAudioTechnologySpatialSoundCard; C:\WINDOWS\System32\drivers\vacnatkd.sys [114008 2020-06-15] (New Audio Technology GmbH -> NEW AUDIO TECHNOLOGY)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2019-07-16] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 PCWinSoft; C:\WINDOWS\System32\drivers\scrcamnetdriver_x64.sys [241800 2012-10-12] (PCWinSoft Systems Informatica Ltda -> Windows (R) Server 2003 DDK provider)
R0 PxHlpa64; C:\WINDOWS\System32\drivers\PxHlpa64.sys [56336 2013-10-16] (Corel Corporation -> Corel Corporation)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12423864 2025-08-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174264 2024-10-17] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 vhidmini; C:\WINDOWS\System32\drivers\walvhid.sys [7552 2009-08-26] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21928 2025-12-22] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [635272 2025-12-22] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102792 2025-12-22] (Microsoft Windows -> Microsoft Corporation)
U3 aswbdisk; kein ImagePath
U1 avgbdisk; kein ImagePath
U3 dmwappushsvc; kein ImagePath
S3 MpKsl508b8475; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
S3 MpKsl621d7010; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
S3 MpKsl7b9fff18; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
S3 MpKsle9233a68; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B783D0E7-2F4D-4516-A1FB-5BFAE2CE29B6}\MpKslDrv.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-01-05 22:15 - 2026-01-05 22:15 - 000003326 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2026-01-05 22:15 - 2026-01-05 22:15 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2026-01-05 22:13 - 2026-01-05 22:13 - 001572676 _____ C:\WINDOWS\Minidump\010526-11078-01.dmp
2026-01-05 22:13 - 2026-01-05 22:13 - 000008192 ___SH C:\DumpStack.log.tmp
2026-01-05 22:05 - 2026-01-05 22:05 - 000190096 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2026-01-05 22:05 - 2026-01-05 22:05 - 000000000 ____D C:\Users\Horst\AppData\LocalLow\IGDump
2026-01-05 21:39 - 2026-01-05 22:24 - 000000000 ____D C:\Users\Horst\AppData\Local\Malwarebytes
2026-01-05 21:39 - 2026-01-05 21:39 - 000002075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-01-05 21:38 - 2026-01-05 21:38 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-01-05 21:38 - 2026-01-05 21:38 - 000000000 ____D C:\Program Files\Malwarebytes
2026-01-05 21:20 - 2026-01-05 21:25 - 000000000 ____D C:\AdwCleaner
2026-01-05 21:18 - 2026-01-05 21:18 - 000007536 _____ C:\Users\Horst\Desktop\S1430001.colorProject
2026-01-05 21:18 - 2026-01-05 21:18 - 000000000 ____D C:\Users\Horst\Desktop\S1430001.colordata
2026-01-04 16:38 - 2026-01-04 16:38 - 000079248 _____ C:\Users\Horst\Documents\invoice2.pdf
2026-01-04 11:59 - 2026-01-05 22:29 - 000000000 ____D C:\FRST
2026-01-04 11:13 - 2026-01-04 11:15 - 544383370 _____ C:\Users\Horst\Documents\registry 2026-01-04.reg
2026-01-04 10:49 - 2026-01-05 22:29 - 000030201 _____ C:\WINDOWS\AicWifiServiceLog.txt
2026-01-04 10:49 - 2026-01-04 10:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ugreen
2026-01-04 10:49 - 2026-01-04 10:49 - 000000000 ____D C:\Program Files\Ugreen
2026-01-04 10:49 - 2024-05-13 06:05 - 001219688 _____ C:\WINDOWS\system32\Drivers\aicusbwifi.sys
2026-01-04 10:49 - 2024-05-08 03:42 - 001060984 _____ C:\WINDOWS\system32\Drivers\aicloadfw.sys
2026-01-04 10:48 - 2024-11-29 06:51 - 000000000 ____D C:\Users\Horst\Desktop\CM762_Driver_V1.2
2025-12-30 17:39 - 2025-12-30 17:39 - 000000000 ____D C:\Users\Horst\Desktop\2012_06_16 - Goldene Hochzeit Waltraud und Wilfried in Alten´s Ruh´, Wunstorf__ Sicherheitskopie in FOTO_Laufwerk Z
2025-12-29 15:49 - 2026-01-02 20:35 - 000000000 ____D C:\Users\Horst\Desktop\Urlaub Eifel
2025-12-27 20:34 - 2025-12-27 20:38 - 000000000 ___HD C:\$WinREAgent
2025-12-23 21:55 - 2025-12-23 21:55 - 000500736 _____ (Realtek) C:\WINDOWS\SwUSB.exe
2025-12-23 21:55 - 2025-12-23 21:55 - 000044760 _____ () C:\WINDOWS\runSW umbenannt.exe
2025-12-23 21:43 - 2025-12-23 21:43 - 000000000 ____D C:\Program Files (x86)\Cisco
2025-12-23 21:37 - 2025-12-23 21:37 - 000003542 _____ C:\WINDOWS\system32\Tasks\SEO
2025-12-23 20:48 - 2025-12-23 20:48 - 000000887 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2025-12-23 20:48 - 2025-12-23 20:48 - 000000000 ____D C:\Users\Horst\AppData\Local\VS Revo Group
2025-12-22 23:20 - 2025-12-22 23:20 - 000000000 ____D C:\Users\Horst\Desktop\mb_bios_ga-q170m-d3h_f23d
2025-12-22 23:11 - 2025-12-22 23:11 - 000000884 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2025-12-22 23:11 - 2025-12-22 23:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2025-12-22 23:11 - 2025-12-22 23:11 - 000000000 ____D C:\ProgramData\CPUID Software
2025-12-22 23:11 - 2025-12-22 23:11 - 000000000 ____D C:\Program Files\CPUID
2025-12-22 22:35 - 2025-12-22 22:35 - 000000000 ____D C:\inetpub
2025-12-22 22:20 - 2025-12-22 22:20 - 000023734 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-12-22 22:17 - 2025-12-22 22:17 - 000023734 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-12-22 21:57 - 2024-10-17 03:54 - 000174264 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2025-12-22 21:51 - 2024-10-17 03:53 - 000175824 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2025-12-22 21:43 - 2025-12-22 21:43 - 000004006 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1505550991
2025-12-22 21:43 - 2025-12-22 21:43 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2025-12-22 19:38 - 2025-12-23 18:28 - 005616792 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-12-21 14:33 - 2025-12-21 14:33 - 000000000 ____D C:\Users\Horst\.openjfx
2025-12-21 14:33 - 2025-12-21 14:33 - 000000000 ____D C:\Users\Horst\.deepartcreator
2025-12-21 14:29 - 2025-12-18 12:31 - 000001513 _____ C:\Users\Horst\Desktop\Aktivierungsanleitung.txt
2025-12-21 14:27 - 2025-12-21 14:28 - 393076295 _____ C:\Users\Horst\Downloads\CHIP_-_DeepArt_Creator (2).zip
2025-12-21 14:26 - 2025-12-21 14:27 - 393076295 _____ C:\Users\Horst\Downloads\CHIP_-_DeepArt_Creator.zip
2025-12-19 19:24 - 2025-12-19 19:27 - 000000000 ____D C:\Users\Horst\Desktop\VIDEOBEARBEITUNG MUSIK - RECORDER - SOUNDBEARBEITUNG
2025-12-18 20:52 - 2025-12-18 20:52 - 000000039 _____ C:\Users\Horst\AppData\Local\kritadisplayrc
2025-12-18 11:18 - 2025-12-18 11:18 - 000000000 ____D C:\Users\Horst\Documents\VideoPad Projekte
2025-12-17 19:06 - 2025-12-17 19:06 - 000001373 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video-Editor.lnk
2025-12-17 19:06 - 2025-12-17 19:06 - 000001347 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Switch Audio-Converter.lnk
2025-12-17 19:05 - 2025-12-17 19:05 - 000001415 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn Disc-Brennprogramm.lnk
2025-12-17 19:05 - 2025-12-17 19:05 - 000001357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MixPad Musikstudio-Software.lnk
2025-12-17 19:05 - 2025-12-17 19:05 - 000000000 ____D C:\Users\Horst\Documents\Mixpad Projects
2025-12-17 19:04 - 2025-12-17 19:04 - 000001353 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk
2025-12-17 18:59 - 2025-12-17 18:59 - 000001233 _____ C:\Users\Public\Desktop\MyKeyFinder.lnk
2025-12-17 18:59 - 2025-12-17 18:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyKeyFinder
2025-12-17 18:59 - 2025-12-17 18:59 - 000000000 ____D C:\Program Files (x86)\MyKeyFinder
2025-12-17 18:53 - 2026-01-02 23:32 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Ashampoo Snap 16
2025-12-17 18:00 - 2025-12-18 21:50 - 000000000 ____D C:\Users\Horst\HDR Projects 9 Pro
2025-12-17 17:52 - 2025-12-17 17:53 - 227531339 _____ C:\Users\Horst\Downloads\CHIP-Ashampoo_Snap_16.zip
2025-12-17 17:47 - 2025-12-17 17:48 - 008688680 _____ (Abelssoft ) C:\Users\Horst\Documents\MyKeyFinder_setup.exe
2025-12-17 17:36 - 2025-12-17 17:36 - 029255160 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Horst\Documents\ashampoo_winoptimizer_27_47122.exe
2025-12-16 15:04 - 2025-12-16 15:04 - 001262796 _____ C:\Users\Horst\Downloads\CHIP_Ascomp_Backup_Maker.zip
2025-12-15 23:23 - 2025-12-15 23:23 - 000000000 ____D C:\Users\Horst\Desktop\IMG_20241214_214816_DRO.sharpendata
2025-12-15 22:36 - 2025-12-15 22:37 - 378915001 _____ C:\Users\Horst\Downloads\3-in1-Paket_fuer_Schwarz-Weiss-Fotografie (2).zip
2025-12-15 22:10 - 2025-12-15 22:10 - 000001474 _____ C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WO27.lnk
2025-12-15 22:05 - 2025-12-15 22:05 - 000000000 ____D C:\WINDOWS\SysWOW64\Translation
2025-12-15 22:05 - 2025-12-15 22:05 - 000000000 ____D C:\WINDOWS\SysWOW64\data
2025-12-15 19:43 - 2025-12-15 22:44 - 000000000 ____D C:\Users\Horst\BlackWhite Projects 6 Pro
2025-12-15 19:36 - 2025-12-15 19:37 - 378915001 _____ C:\Users\Horst\Downloads\3-in1-Paket_fuer_Schwarz-Weiss-Fotografie.zip
2025-12-15 19:27 - 2025-12-15 19:53 - 000000000 ____D C:\Users\Horst\AppData\Roaming\neroaiu
2025-12-15 19:27 - 2025-12-15 19:27 - 000000000 ____D C:\Users\Horst\Documents\NeroAIU
2025-12-15 19:16 - 2025-12-15 19:16 - 000000000 ____D C:\WINDOWS\nsxCDF2.tmp
2025-12-15 19:15 - 2025-12-15 19:35 - 000000000 ____D C:\Users\Horst\AppData\Roaming\nerostart
2025-12-15 19:12 - 2025-12-15 19:13 - 165313141 _____ C:\Users\Horst\Downloads\CHIP_Nero_AI_Image_Upscaler_Pro (2).zip
2025-12-15 19:10 - 2025-12-15 19:11 - 165313141 _____ C:\Users\Horst\Downloads\CHIP_Nero_AI_Image_Upscaler_Pro.zip
2025-12-15 19:06 - 2025-12-15 19:06 - 016754854 _____ C:\Users\Horst\Downloads\CHIP_Wise_Care_365 (2).zip
2025-12-15 13:24 - 2025-12-15 13:24 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Wise Utilities
2025-12-14 22:57 - 2025-12-23 21:15 - 000000004 ___SH C:\WINDOWS\wisefs.dat
2025-12-12 11:26 - 2025-12-12 11:26 - 000002134 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audials Vision SE 2026.lnk
2025-12-12 11:21 - 2025-12-12 11:21 - 006762626 _____ C:\Users\Horst\Downloads\CHIP_Audials_Vision_2026_SE (3).zip
2025-12-12 11:17 - 2025-12-12 11:17 - 006762626 _____ C:\Users\Horst\Downloads\CHIP_Audials_Vision_2026_SE (2).zip
2025-12-12 11:13 - 2025-12-12 11:13 - 006762626 _____ C:\Users\Horst\Downloads\CHIP_Audials_Vision_2026_SE.zip
2025-12-12 10:19 - 2025-12-15 19:16 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2025-12-06 20:12 - 2025-12-06 20:12 - 000000000 ____D C:\Users\Horst\.ms-ad
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-01-05 22:28 - 2025-11-15 16:11 - 000000000 ____D C:\Users\Horst\Desktop\Wartung
2026-01-05 22:28 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-01-05 22:25 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2026-01-05 22:21 - 2022-10-28 20:19 - 000000000 ____D C:\Users\Horst\AppData\Local\LogiOptionsPlus
2026-01-05 22:20 - 2020-09-17 18:06 - 001722792 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-01-05 22:20 - 2019-12-07 15:51 - 000743714 _____ C:\WINDOWS\system32\perfh007.dat
2026-01-05 22:20 - 2019-12-07 15:51 - 000150136 _____ C:\WINDOWS\system32\perfc007.dat
2026-01-05 22:20 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2026-01-05 22:18 - 2021-12-17 20:42 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-01-05 22:13 - 2020-09-19 17:26 - 000000000 ____D C:\WINDOWS\Minidump
2026-01-05 22:13 - 2020-09-17 18:14 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-01-05 22:13 - 2020-09-17 17:55 - 000000000 ____D C:\Users\Horst
2026-01-05 22:13 - 2020-09-17 17:54 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-01-05 22:13 - 2017-09-16 09:33 - 000000000 __SHD C:\Users\Horst\IntelGraphicsProfiles
2026-01-05 22:13 - 2017-09-16 09:33 - 000000000 ____D C:\Intel
2026-01-05 22:13 - 2016-07-16 12:47 - 000000227 _____ C:\WINDOWS\win.ini
2026-01-05 22:04 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-01-05 21:59 - 2023-12-11 14:44 - 000000000 ____D C:\Program Files (x86)\Innovative Solutions
2026-01-05 21:59 - 2022-12-19 12:26 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Innovative Solutions
2026-01-05 21:59 - 2022-12-19 12:26 - 000000000 ____D C:\Users\Horst\AppData\Local\Innovative Solutions
2026-01-05 21:59 - 2019-06-24 17:03 - 000000000 ____D C:\Program Files (x86)\Falco Billiard
2026-01-05 21:39 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-01-05 21:25 - 2023-12-19 18:51 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2026-01-05 21:25 - 2017-09-27 09:47 - 000000000 ____D C:\Users\Horst\AppData\Roaming\IObit
2026-01-05 21:25 - 2017-09-27 09:47 - 000000000 ____D C:\Users\Horst\AppData\LocalLow\IObit
2026-01-05 21:25 - 2017-09-27 09:47 - 000000000 ____D C:\ProgramData\IObit
2026-01-05 20:24 - 2019-10-03 16:59 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2026-01-05 19:55 - 2018-05-28 14:05 - 000000000 ____D C:\Users\Horst\AppData\Local\D3DSCache
2026-01-05 18:46 - 2024-07-09 18:27 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2026-01-04 21:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-01-03 23:33 - 2017-09-26 18:03 - 000000000 ____D C:\Users\Horst\AppData\Local\Adobe
2026-01-03 15:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\appcompat
2026-01-02 20:04 - 2025-11-23 23:14 - 000000000 ____D C:\Users\Horst\Desktop\BILDBEARBEITUNG - CAT - PRESETS - HINTERGRÜNDE
2026-01-02 18:19 - 2024-11-26 22:18 - 000000000 ____D C:\Users\Horst\Desktop\NOCH ZUORDNEN
2026-01-01 23:51 - 2022-11-30 12:39 - 000000000 ____D C:\Users\Horst\Color Projects 6 Pro
2025-12-31 22:28 - 2017-12-05 15:17 - 000000000 ____D C:\Users\Horst\AppData\Local\CrashDumps
2025-12-31 13:35 - 2025-11-13 21:55 - 000000000 ____D C:\Users\Horst\Desktop\2015-25-12 - Heiligabend__Sicherheitskopie in Laufwerk SIKO Foto (Z)
2025-12-30 12:18 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-12-30 12:18 - 2018-07-19 10:05 - 000000000 ____D C:\ProgramData\Packages
2025-12-29 15:16 - 2017-12-06 14:17 - 000000000 ____D C:\Users\Horst\AppData\Local\Packages
2025-12-29 15:15 - 2024-09-04 20:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-12-29 15:15 - 2024-01-20 23:25 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2025-12-28 14:07 - 2024-02-25 23:05 - 000000000 ____D C:\Users\Horst\Desktop\Heizkesel_Puffer_Ausfall_Warttung
2025-12-28 14:04 - 2023-01-14 17:28 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-12-28 13:34 - 2020-05-24 13:32 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-12-28 13:25 - 2020-09-17 18:14 - 000003754 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-12-28 13:25 - 2020-09-17 18:14 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-12-27 22:39 - 2017-09-25 18:58 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-12-27 22:28 - 2020-09-17 18:14 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2025-12-27 21:55 - 2025-08-08 17:57 - 000000000 ____D C:\Users\Horst\Desktop\HAUS UND GARTEN WESTERENDE UND GARTEN BOKELOH__Sicherheitskopie in Laufwerk EXT. (Y)
2025-12-27 20:55 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-12-23 21:43 - 2020-12-03 20:48 - 000000000 ____D C:\Program Files (x86)\Realtek
2025-12-23 21:43 - 2017-09-16 09:23 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2025-12-23 21:25 - 2021-05-25 18:32 - 000000000 ____D C:\Users\Public\Documents\Ashampoo
2025-12-23 21:25 - 2020-02-02 23:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2025-12-23 21:25 - 2020-02-02 23:35 - 000000000 ____D C:\Program Files (x86)\Ashampoo
2025-12-23 21:20 - 2022-07-27 21:23 - 000000000 ____D C:\Program Files (x86)\Wise
2025-12-23 21:10 - 2023-12-19 18:52 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Lavasoft
2025-12-23 21:10 - 2023-12-19 18:52 - 000000000 ____D C:\Users\Horst\AppData\Local\Lavasoft
2025-12-23 20:48 - 2021-12-26 18:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2025-12-23 20:48 - 2021-12-26 18:46 - 000000000 ____D C:\Program Files\Revo Uninstaller
2025-12-23 18:52 - 2017-09-25 19:20 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
2025-12-23 18:47 - 2020-07-09 20:33 - 000000000 ____D C:\Users\Horst\AppData\Roaming\TuneIn
2025-12-23 18:07 - 2025-07-23 20:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice
2025-12-23 18:03 - 2020-09-05 11:21 - 000000000 ____D C:\Program Files\Reallusion
2025-12-23 17:09 - 2020-02-13 22:16 - 000000000 ____D C:\Users\Horst\AppData\Roaming\SoftMaker
2025-12-23 17:08 - 2020-09-12 18:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Faceware
2025-12-23 17:08 - 2020-09-12 18:24 - 000000000 ____D C:\Program Files\Faceware
2025-12-23 17:05 - 2019-11-27 21:14 - 000000000 ____D C:\ProgramData\NCH Software
2025-12-23 17:05 - 2019-11-27 21:14 - 000000000 ____D C:\Program Files (x86)\NCH Software
2025-12-23 17:05 - 2017-10-02 19:42 - 000000000 ____D C:\Users\Horst\AppData\Roaming\NCH Software
2025-12-23 16:56 - 2017-09-26 14:42 - 000000000 ____D C:\ProgramData\Adobe
2025-12-23 16:56 - 2017-09-09 21:34 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Adobe
2025-12-23 16:55 - 2022-07-27 18:20 - 000000000 ____D C:\Users\Horst\AppData\Roaming\com.adobe.dunamis
2025-12-23 16:55 - 2017-09-26 22:18 - 000000000 ____D C:\Program Files\Common Files\Adobe
2025-12-23 16:52 - 2017-09-26 21:15 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2025-12-22 22:55 - 2023-12-13 18:39 - 000000000 ____D C:\Program Files\Common Files\MAGIX Services
2025-12-22 22:35 - 2024-07-23 19:12 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-12-22 22:35 - 2023-12-14 03:56 - 000000000 ____D C:\WINDOWS\InboxApps
2025-12-22 22:35 - 2019-12-07 15:54 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2025-12-22 22:35 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2025-12-22 22:35 - 2019-12-07 15:52 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\USOPrivate
2025-12-22 22:35 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2025-12-22 22:35 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2025-12-22 22:16 - 2020-09-17 17:57 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-12-22 21:59 - 2023-10-05 15:46 - 000000000 ____D C:\Users\Horst\AppData\Local\Ashampoo Backup
2025-12-22 21:59 - 2017-10-29 10:59 - 000000000 ____D C:\Program Files (x86)\Nero
2025-12-22 21:55 - 2017-09-16 10:07 - 218369424 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-12-22 21:55 - 2017-09-16 10:07 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-12-22 21:53 - 2022-08-17 18:01 - 000000000 ____D C:\Program Files\dotnet
2025-12-22 21:53 - 2017-09-16 09:37 - 000000000 ____D C:\ProgramData\Package Cache
2025-12-22 21:52 - 2025-04-08 19:24 - 000000000 ____D C:\Program Files (x86)\dotnet
2025-12-22 21:52 - 2018-05-28 13:53 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-12-22 21:51 - 2023-05-24 14:32 - 000000000 ____D C:\Program Files\RUXIM
2025-12-22 21:43 - 2017-09-16 09:36 - 000000000 ____D C:\Program Files\Opera
2025-12-22 21:39 - 2020-07-21 18:51 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2025-12-22 20:39 - 2020-07-21 18:51 - 000000000 ____D C:\Users\Horst\AppData\Local\BraveSoftware
2025-12-22 20:38 - 2017-09-16 09:36 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Opera Software
2025-12-22 20:38 - 2017-09-16 09:36 - 000000000 ____D C:\Users\Horst\AppData\Local\Opera Software
2025-12-22 19:24 - 2020-11-05 17:52 - 000000000 ____D C:\Users\Horst\AppData\Local\ElevatedDiagnostics
2025-12-21 21:33 - 2024-09-19 21:42 - 000000000 ____D C:\Users\Horst\Projects Series
2025-12-21 13:17 - 2019-06-22 10:49 - 000000000 ____D C:\ProgramData\Reallusion
2025-12-20 23:38 - 2024-12-27 19:30 - 000000000 ____D C:\Users\Horst\Desktop\SAUERBRATEN
2025-12-19 21:06 - 2020-03-02 19:34 - 000000132 _____ C:\Users\Horst\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2025-12-19 19:45 - 2018-03-22 22:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Franzis
2025-12-19 19:44 - 2021-12-22 20:45 - 000000000 ____D C:\ProgramData\Audials
2025-12-19 19:43 - 2020-02-13 19:00 - 000000000 ____D C:\Program Files\Ashampoo
2025-12-18 20:52 - 2019-10-24 18:05 - 000038066 _____ C:\Users\Horst\AppData\Local\kritarc
2025-12-18 20:52 - 2019-10-24 18:05 - 000000000 ____D C:\Users\Horst\AppData\Roaming\krita
2025-12-18 19:41 - 2025-11-23 20:48 - 000000000 ____D C:\Users\Horst\Sharpen 5 Pro
2025-12-18 11:27 - 2017-12-28 22:49 - 000000000 ____D C:\Users\Horst\AppData\LocalLow\Temp
2025-12-17 19:16 - 2023-12-06 19:00 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Ashampoo Snap
2025-12-17 18:59 - 2018-01-22 19:11 - 000000000 ____D C:\Users\Horst\AppData\Local\Abelssoft
2025-12-17 17:58 - 2023-03-08 14:53 - 000000000 ____D C:\Program Files\Franzis
2025-12-16 20:21 - 2018-05-21 09:52 - 000000000 ____D C:\Users\Horst\AppData\Local\PlaceholderTileLogoFolder
2025-12-16 18:30 - 2021-12-22 20:22 - 000000000 ____D C:\Users\Horst\AppData\Roaming\ASCOMP Software
2025-12-16 15:06 - 2020-11-05 18:43 - 000000000 ____D C:\Users\Horst\AppData\Local\Avira
2025-12-16 13:51 - 2023-01-14 17:28 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-12-15 23:48 - 2017-09-25 18:58 - 000000000 ____D C:\Users\Horst\AppData\Local\Google
2025-12-15 22:14 - 2019-12-03 14:55 - 000000000 ____D C:\Users\Horst\AppData\Roaming\dvdcss
2025-12-15 22:14 - 2019-09-30 13:28 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Notepad++
2025-12-15 19:27 - 2017-12-03 23:33 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Nero
2025-12-15 19:27 - 2017-10-29 11:05 - 000000000 ____D C:\ProgramData\Nero
2025-12-14 23:39 - 2024-01-17 18:08 - 000000000 ____D C:\Users\_ashbackuppb_
2025-12-14 22:42 - 2023-04-15 18:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\InPixio
2025-12-14 22:42 - 2020-11-05 19:08 - 000000000 ____D C:\Program Files\CCleaner
2025-12-13 20:31 - 2020-12-01 19:50 - 000000000 ____D C:\Program Files\7-Zip
2025-12-12 15:35 - 2017-10-02 19:41 - 000000000 ____D C:\Users\Horst\AppData\Roaming\Intel
2025-12-12 11:27 - 2021-12-22 20:32 - 000000000 ____D C:\Users\Horst\AppData\Local\Audials
2025-12-12 11:26 - 2023-12-08 18:18 - 000000000 ____D C:\Program Files\Audials
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2020-04-14 21:18 - 2020-04-14 21:20 - 332627677 _____ () C:\Program Files\makehuman-1.1.1-win32.zip
2019-06-24 16:49 - 2017-11-19 12:51 - 000004286 _____ () C:\Program Files (x86)\FalcoGo.ico
2019-06-24 16:49 - 2017-11-19 12:53 - 000000044 _____ () C:\Program Files (x86)\FalcoGo.url
2019-06-24 16:49 - 2016-01-05 12:37 - 000004286 _____ () C:\Program Files (x86)\FalconLine.ico
2019-06-24 16:49 - 2016-01-05 12:25 - 000000047 _____ () C:\Program Files (x86)\FalconLine.url
2019-06-24 16:49 - 2016-12-21 00:39 - 000004286 _____ () C:\Program Files (x86)\FalcoSpace.ico
2019-06-24 16:49 - 2016-12-21 00:36 - 000000047 _____ () C:\Program Files (x86)\FalcoSpace.url
2019-07-07 16:36 - 2019-07-07 16:36 - 007315103 _____ () C:\Program Files (x86)\picturenaut_3_2_1690.zip
2011-01-12 01:00 - 2011-01-12 01:00 - 000146944 _____ () C:\Program Files (x86)\Common Files\dsfFLACDecoder.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000221184 _____ () C:\Program Files (x86)\Common Files\dsfFLACEncoder.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000204800 _____ () C:\Program Files (x86)\Common Files\dsfNativeFLACSource.dll
2012-05-11 13:16 - 2012-05-11 13:16 - 000171520 _____ () C:\Program Files (x86)\Common Files\dsfOggDemux2.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000240128 _____ () C:\Program Files (x86)\Common Files\dsfVorbisDecoder.dll
2009-07-11 22:08 - 2009-07-11 22:08 - 000001860 _____ () C:\Program Files (x86)\Common Files\Microsoft.VC90.CRT.manifest
2011-04-18 21:51 - 2011-04-18 21:51 - 000569680 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\MSVCP90.dll
2011-04-18 21:51 - 2011-04-18 21:51 - 000653136 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\MSVCR90.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000412672 _____ (Google) C:\Program Files (x86)\Common Files\vp8decoder.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000701440 _____ (Google) C:\Program Files (x86)\Common Files\vp8encoder.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000302592 _____ (Google) C:\Program Files (x86)\Common Files\webmmux.dll
2010-12-16 20:39 - 2010-12-16 20:39 - 000292352 _____ (Google) C:\Program Files (x86)\Common Files\webmsplit.dll
2011-01-12 01:00 - 2011-01-12 01:00 - 000030208 _____ () C:\Program Files (x86)\Common Files\wmpinfo.dll
2022-01-20 17:17 - 2022-01-20 17:17 - 000000246 _____ () C:\Users\Horst\AppData\Roaming\.ptbt1
2018-02-23 23:17 - 2021-11-30 17:09 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-AIFF-Format - Voreinstellungen
2018-02-24 22:58 - 2024-01-22 20:27 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-BMP-Format - Voreinstellungen
2021-01-09 20:05 - 2021-04-05 22:13 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-GIF-Format - Voreinstellungen
2020-03-02 19:34 - 2025-12-19 21:06 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2017-11-08 18:21 - 2024-08-06 18:07 - 000000132 _____ () C:\Users\Horst\AppData\Roaming\Adobe CS6-Targa-Format - Voreinstellungen
2020-06-11 21:39 - 2020-06-11 21:39 - 001456142 _____ () C:\Users\Horst\AppData\Roaming\AvidLink_Install.log
2020-11-12 20:48 - 2024-10-27 20:01 - 000000632 _____ () C:\Users\Horst\AppData\Roaming\com.cloudapp.windows.plist
2019-10-24 22:10 - 2025-11-24 22:03 - 000000128 _____ () C:\Users\Horst\AppData\Roaming\FotoSketcher.ini
2019-04-05 14:25 - 2019-04-05 14:26 - 000000112 _____ () C:\Users\Horst\AppData\Roaming\main.ini
2019-07-07 16:08 - 2020-06-27 17:41 - 000000009 _____ () C:\Users\Horst\AppData\Roaming\tabbles_hwnd_main
2019-07-07 16:08 - 2020-06-27 17:41 - 000000009 _____ () C:\Users\Horst\AppData\Roaming\tabbles_hwnd_quick_link
2020-05-24 19:15 - 2020-05-24 19:15 - 000018687 _____ () C:\Users\Horst\AppData\Roaming\unins000.dat
2020-05-24 19:15 - 2020-05-24 19:15 - 000013844 _____ () C:\Users\Horst\AppData\Roaming\unins000.msg
2017-11-02 22:54 - 2024-01-11 23:48 - 000001456 _____ () C:\Users\Horst\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2025-12-15 23:48 - 2025-12-15 23:48 - 000111621 _____ () C:\Users\Horst\AppData\Local\dxdiag.log
2025-10-14 20:57 - 2025-12-18 13:06 - 000008180 _____ () C:\Users\Horst\AppData\Local\krita-sysinfo.log
2019-10-24 18:05 - 2025-12-18 20:52 - 000176896 _____ () C:\Users\Horst\AppData\Local\krita.log
2020-07-01 20:54 - 2025-12-18 13:05 - 000051362 _____ () C:\Users\Horst\AppData\Local\kritacrash.log
2025-12-18 20:52 - 2025-12-18 20:52 - 000000039 _____ () C:\Users\Horst\AppData\Local\kritadisplayrc
2019-10-24 18:05 - 2025-12-18 20:52 - 000038066 _____ () C:\Users\Horst\AppData\Local\kritarc
2020-08-06 16:28 - 2020-08-06 16:28 - 000000057 _____ () C:\Users\Horst\AppData\Local\makehuman.conf
2018-10-04 11:18 - 2022-10-28 20:35 - 000000309 _____ () C:\Users\Horst\AppData\Local\oobelibMkey.log
2025-09-16 12:48 - 2025-09-16 12:48 - 000000768 _____ () C:\Users\Horst\AppData\Local\recently-used.xbel
2017-10-01 20:45 - 2020-07-15 20:43 - 000007600 _____ () C:\Users\Horst\AppData\Local\Resmon.ResmonCfg
2022-11-26 18:42 - 2022-12-09 20:24 - 000139264 _____ () C:\Users\Horst\AppData\Local\Tempwd.tmp
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
|
|
05.01.2026, 22:54
| #7 |
| | FRST Resultat Teil 2 Addition.txt: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-11-2025
durchgeführt von Horst (05-01-2026 22:33:31)
Gestartet von C:\Users\Horst\Desktop\Wartung
Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) (2020-09-17 17:14:40)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-947909773-2885354443-2675781160-500 - Administrator - Disabled)
buhso (S-1-5-21-947909773-2885354443-2675781160-1005 - Limited - Disabled)
DefaultAccount (S-1-5-21-947909773-2885354443-2675781160-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-947909773-2885354443-2675781160-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-947909773-2885354443-2675781160-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-947909773-2885354443-2675781160-1003 - Limited - Enabled)
Horst (S-1-5-21-947909773-2885354443-2675781160-1001 - Administrator - Enabled) => C:\Users\Horst
WDAGUtilityAccount (S-1-5-21-947909773-2885354443-2675781160-504 - Limited - Disabled)
_ashbackuppb_ (S-1-5-21-947909773-2885354443-2675781160-1010 - Administrator - Enabled) => C:\Users\_ashbackuppb_
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}
AS: Avira Antivirus (Enabled - Up to date) {33CF8AA2-FA06-4AD4-98AB-332D53DD7FFB}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
100 Photoshop-Aktionen Vol.1 (HKLM-x32\...\100 Photoshop-Aktionen Vol. 1_is1) (Version: - )
100 Photoshop-Aktionen Vol.2 (HKLM-x32\...\100 Photoshop-Aktionen Vol. 2_is1) (Version: - )
4K Video to MP3 (HKLM\...\{8232A6B7-2815-485A-AAF2-10025111DE36}) (Version: 3.0.0.930 - Open Media LLC)
64 Bit HP CIO Components Installer (HKLM\...\{C788B026-20BD-4E96-B698-533F1D6C5013}) (Version: 7.2.4 - Hewlett-Packard) Hidden
7-Zip 25.01 (x64) (HKLM\...\7-Zip) (Version: 25.01 - Igor Pavlov)
AbstractCurves x64 (HKLM\...\AbstractCurves AbstractCurves x64 1) (Version: 1.190 - AbstractCurves Software)
Adobe Bridge 1.0 (HKLM-x32\...\{B74D4E10-6884-0000-0000-000000000101}) (Version: 001.000.001 - Adobe Systems) Hidden
Adobe Bridge 2022 (HKLM-x32\...\KBRG_12_0_2) (Version: 12.0.2 - Adobe Inc.)
Adobe Common File Installer (HKLM-x32\...\{8EDBA74D-0686-4C99-BFDD-F894678E5101}) (Version: 1.00.001 - Adobe System Incorporated) Hidden
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.4.0.361 - Adobe Inc.)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 8.6.0.79 - Adobe Inc.)
Adobe Help Center 1.0 (HKLM-x32\...\{E9787678-119F-4D52-B551-6739B2B22101}) (Version: 1.0.1 - Adobe Systems) Hidden
Adobe Illustrator CS2 (HKLM-x32\...\Adobe Illustrator CS2) (Version: 12.000.000 - Adobe Systems Inc.)
Adobe InDesign CS2 (HKLM-x32\...\Adobe InDesign CS2 - {7F4C8163-F259-49A0-A018-2857A90578BC}) (Version: 004.000.000 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Premiere Rush (HKLM-x32\...\RUSH_2_3) (Version: 2.3 - Adobe Inc.)
Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.4.204 - Adobe Systems, Inc.)
Adobe Stock Photos 1.0 (HKLM-x32\...\{786C5747-0C40-4930-9AFE-113BCE553101}) (Version: 1.0.1 - Adobe Systems) Hidden
Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version: 3.0 - Adobe Systems, Inc.)
Adobe UXP Developer Tool (HKLM-x32\...\UXPD_1_5_0) (Version: 1.5.0 - Adobe Inc.)
AKVIS Coloriage (HKLM\...\{1A751AEE-4021-4611-96D4-EC6FBF119E39}) (Version: 14.0.1492.24452 - AKVIS) Hidden
AKVIS Coloriage (HKLM-x32\...\{c73d6afc-9305-423a-8ee3-e26d6a0af4c2}) (Version: 14.0.1492.24452 - AKVIS)
All Image Downloader (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\{64eac9ac-0b76-44ae-b702-1b8f4a192011}) (Version: 2.0.0 - Imgdownloader)
Amazon Music (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Amazon Amazon Music) (Version: 8.5.0.2261 - Amazon.com Services LLC)
Amazon Photos (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Amazon Photos) (Version: 10.8.0 - Amazon.com, Inc.)
AniMaker Drag (HKLM-x32\...\AniMaker Drag) (Version: 2.1 - AniMaker GmbH)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ArcSoft Scan-n-Stitch Deluxe (HKLM-x32\...\{FF8455A9-21E8-457D-AC64-510A705D53B3}) (Version: 1.1.2.55 - ArcSoft)
Ashampoo Audio Recorder Free (HKLM-x32\...\{91B33C97-C3B3-7A23-56CA-61CA8472B256}_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo Backup Pro 17 (HKLM\...\{91B33C97-5909-F165-4B92-42DCE6E18868}_is1) (Version: 17.11 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 2021 (HKLM-x32\...\{91B33C97-87D2-CBDB-6C78-9844D71F4195}_is1) (Version: 1.22.0 - Ashampoo GmbH & Co. KG)
Ashampoo Cover Studio 2017 (HKLM-x32\...\{91B33C97-6D7D-102A-7711-56C011AFB81B}_is1) (Version: 3.0.0 - Ashampoo GmbH & Co. KG)
Ashampoo Home Design 5 (HKLM\...\{6FE137BD-F8A3-4995-B812-04928FFD3D73}_is1) (Version: 5.0.0 - Ashampoo GmbH & Co. KG)
Ashampoo Music Studio 2020 (HKLM-x32\...\{91B33C97-FFD3-62FA-D018-BCB9A3BC574C}_is1) (Version: 1.8.1 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 10 v.10.2.1 (HKLM-x32\...\{C92AB6F1-4B66-808A-D77C-25EF81C0176A}_is1) (Version: 10.2.1 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander Free (HKLM-x32\...\{0A11EA01-CD60-73B5-2FF0-9FCC1502CD64}_is1) (Version: 11.2.0 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer 9 (HKLM\...\{91B33C97-A7B5-2D2D-BC10-085C65109B0D}_is1) (Version: 9.4.7 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Recovery 2 (HKLM\...\{BB339C1F-657A-6D2A-BD02-EF21B6F35991}_is1) (Version: 2.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo Registry Cleaner 2 (HKLM-x32\...\{4209F371-AD80-9E5D-7FD6-99DC6D5D8B7F}_is1) (Version: 2.00.00 - Ashampoo GmbH & Co. KG)
Ashampoo Slideshow Studio 2019 (HKLM-x32\...\{91B33C97-4A4D-A9FD-B59A-1256B60F3665}_is1) (Version: 1.4.0 - Ashampoo GmbH & Co. KG)
Ashampoo Snap 16 (HKLM\...\{0A11EA01-8829-6E65-628A-90709BFA6C2E}_is1) (Version: 16.0.9 - Ashampoo GmbH & Co. KG)
Ashampoo WinOptimizer 27 (HKLM-x32\...\{4209F371-B009-83C0-55A2-B0904D2A6CF6}_is1) (Version: 27.00.05 - Ashampoo GmbH & Co. KG)
Ashampoo ZIP Free (HKLM-x32\...\{0A11EA01-5173-F4C2-0973-35C932D5C674}_is1) (Version: 1.0.7 - Ashampoo GmbH & Co. KG)
Audacity 3.0.2 (HKLM-x32\...\Audacity_is1) (Version: 3.0.2 - Audacity Team)
Audacity 3.7.5 (64 Bit) (HKLM\...\Audacity_is1) (Version: 3.7.5 - Audacity Team)
Audials Vision SE 2026 (HKLM\...\{43349E3F-3B86-4C50-A791-1941558E12EE}) (Version: 26.0.44.0 - Audials AG)
audite! 6.5 (HKLM-x32\...\{F979439C-55CD-41A4-B453-D2F347142DB4}) (Version: 6.5.0 - capella software)
Autodesk SketchBook (HKLM\...\{AE6C5657-8710-4968-BEB5-1E2ED89CB2D2}) (Version: 8.71.0000 - Autodesk)
BenVista PhotoZoom Pro 9.0.2 (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\PhotoZoom Pro 9) (Version: 9.0.2 - BenVista Ltd.)
BLACK WHITE projects 6 professional (64-Bit) (HKLM\...\SILVER_PROJECTS_6_3_28B15F1D_is1) (Version: 6.63 - Franzis Verlag GmbH)
blender (HKLM\...\{7AE80A32-183F-48A8-91A1-B1889B3B6B38}) (Version: 2.93.6 - Blender Foundation)
capella 2008 (HKLM-x32\...\{8D04F5C2-704D-4DB8-84FF-22300783D7F8}) (Version: 6.00.9001 - capella-software)
capella playAlong 3 (HKLM-x32\...\{C9A08B65-CFA7-47E7-A6BD-F54971F51763}) (Version: 3.0 - capella-software)
capella reader 8 (HKLM-x32\...\{d40fe571-3b74-4b1d-9f06-8ea780cfae5f}) (Version: 8 - capella-software AG)
capella-scan 5.0 (HKLM-x32\...\capella-scan 5.0) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 6.38 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.8.1067.0 - Piriform Software) Hidden
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1583.3 - Piriform Software) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CloudApp for Windows (HKLM-x32\...\{5D95CFF5-3601-44D9-94B4-4C4EEA836B51}) (Version: 6.0.0.90 - CloudPlus, Inc.)
CODIJY Colorizer Pro (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\{5a136515-5018-4939-93b3-8ede6788feab}) (Version: 4.2.0 - CODIJY)
COLOR projects 6 professional (64-Bit) (HKLM\...\COLOR_PROJECTS_6_3_C935FDA1_is1) (Version: 6.63 - Franzis Verlag GmbH)
Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{72DB27D3-FE05-4227-AF5A-11CD101ECF09}) (Version: 15.1.0.588 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM-x32\...\{72DB27D3-FE05-4227-AF5A-11CD101ECF09}) (Version: 15.1.588 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Extra Content (HKLM-x32\...\_{5A10CFDA-FA2B-453C-B561-AE864E62EAC8}) (Version: - Corel Corporation)
CorelDRAW Essentials X5 - Extra Content (HKLM-x32\...\{5A10CFDA-FA2B-453C-B561-AE864E62EAC8}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - IPM (HKLM-x32\...\{666D7CED-12E0-4BA3-B594-5681961E7B02}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - WT (HKLM-x32\...\{3B1EF0C5-8855-416F-A6F4-5CC5FCF267CA}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 (HKLM-x32\...\_{EDBEBF07-F880-48FB-9AA5-0E8E71E02D83}) (Version: 15.1.0.588 - Corel Corporation)
CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit (HKLM\...\{46AE421C-BF1B-4B62-BE0E-62FE09C6D5B5}) (Version: 15.1.588 - Corel Corporation) Hidden
CPUID CPU-Z 2.17 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.17 - CPUID, Inc.)
CrazyTalk Animator Standard (HKLM-x32\...\{789567FD-CAA2-4E1C-B38E-9072B3015FFD}) (Version: 1.2.2010.1 - Reallusion Inc.)
CrazyTalk Animator v3.32 PRO (HKLM-x32\...\{6B844167-0760-43FD-BBCA-2463EC967721}) (Version: 3.32.4718.1 - Reallusion Inc.)
Crescendo Notensatz-Editor (HKLM-x32\...\Crescendo) (Version: 10.10 - NCH Software)
CutOut 9 professional (11022020) (HKLM\...\CutOut 9 professional_is1) (Version: 9 - Franzis.de)
darktable (HKLM\...\darktable) (Version: 2.4.1 - the darktable project)
DENOISE projects 3 professional (64-Bit) (HKLM\...\DENOISE_PROJECTS_3_3_FBC348A0_is1) (Version: 3.32 - Franzis Verlag GmbH)
Design & Print (HKLM-x32\...\Design & Print 5.1.0) (Version: 5.1.0 - Avery Zweckform)
Doctolib 2.30.0 (HKLM\...\a23b93d7-c27b-59d6-b1a0-6e4b0d5d056a) (Version: 2.30.0 - Doctolib)
DokuDownloader 2019 (HKLM-x32\...\{28806E83-7109-4E6A-A2C6-B8C43055C59C}_is1) (Version: 1.0 - Abelssoft)
Druckerdeinstallation für EPSON XP-960 Series (HKLM\...\EPSON XP-960 Series) (Version: - Seiko Epson Corporation)
Easy Photo Scan (HKLM-x32\...\{99364024-626C-4BE1-89C8-2F207023497B}) (Version: 1.00.0018 - Seiko Epson Corporation)
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.2 - Seiko Epson Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{7E0261C4-8495-4365-BE48-647701D8B9BD}) (Version: 2.8.3.0 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.50.00 - Seiko Epson Corporation)
Epson Printer Connection Checker (HKLM-x32\...\{DE32F90E-1A29-4D74-BCF1-E7DDB25D713A}) (Version: 3.4.0.0 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{711E8536-AB71-4455-A6C4-357FDBBEBF91}) (Version: 4.6.7 - Seiko Epson Corporation)
EPSON-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.57.0.0 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)
EverDoc 2018 (HKLM-x32\...\{CE690D98-4029-4620-879D-8018BF9CFBEC}_is1) (Version: 3.26 - Abelssoft)
EverDoc Printer++ (64bit) (HKLM\...\{D8156771-98B2-4A23-8122-C904F2410DF1}) (Version: 1.0.0 - Printer++)
Express Burn Disc-Brennprogramm (HKLM-x32\...\ExpressBurn) (Version: 12.01 - NCH Software)
Facebook Desktop (HKLM-x32\...\{844B8965-E5AA-4F9A-A4D4-4E59D4F44F64}) (Version: 0.8.0 - Eric Zhang)
Firebird v2.1 (HKLM-x32\...\Tone2 Firebird_is1) (Version: - Tone2)
FOCUS projects 3 professional (64-Bit) (HKLM\...\FOCUS_PROJECTS_3_3_EDC5B478_is1) (Version: 3.25 - Franzis Verlag GmbH)
Folder Icon Basic (HKLM-x32\...\{EAF4C8EE-4D58-418D-8960-CA9A1628DA77}) (Version: 5.1.0.0 - MSTech Global Ltd) Hidden
FontForge Version 07-11-2020 (HKLM-x32\...\{56748B9C-19AE-4689-B8C5-5A45AE0A993A}_is1) (Version: 07-11-2020 - FontForgeBuilds)
FotoSketcher 3.60 (HKLM\...\{E7C6D565-2E48-4303-A114-AFE7B2E561AF}_is1) (Version: - David THOIRON)
Free FreeCell Solitaire 2017 v3.2 (HKLM-x32\...\Free FreeCell Solitaire_is1) (Version: - TreeCardGames)
Free GIF Maker (HKLM-x32\...\Free GIF Maker_is1) (Version: 1.3.48.831 - Digital Wave Ltd)
Free Notes & Office Ink (HKLM-x32\...\{556F2137-B772-43BB-9A45-E0275234DD16}) (Version: - )
FreeCAD 0.21.1 (HKLM\...\FreeCAD0211) (Version: 0.21.1 - FreeCAD Team)
FreeCAD 1.0.2 (HKLM\...\FreeCAD102) (Version: 1.0.2 - FreeCAD Team)
FreeRIP MP3 Converter 5.7.1.2 (HKLM-x32\...\{501451DE-5808-4599-B544-8BD0915B6B24}_is1) (Version: 5.7.1.2 - GreenTree Applications SRL)
GMX MailCheck für Windows (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar IE8) (Version: 2.7.10.0 - 1&1 Mail & Media GmbH)
GMX Suche (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\1&1 Mail & Media GmbH DS1) (Version: 1.2.0.0 - 1&1 Mail & Media GmbH)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 143.0.7499.170 - Google LLC)
Google Earth Pro (HKLM\...\{8D42B7EA-0BF8-4E13-B646-652FE578F998}) (Version: 7.3.6.10441 - Google)
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.53.3) (Version: 9.53.3 - Artifex Software Inc.)
HD Writer AE 2.1 (HKLM-x32\...\{AC4BDEB4-E06A-4605-B5D2-2FE6750681A5}) (Version: 2.01.141.1031 - Panasonic Corporation)
HDR projects 9 professional (HKLM\...\HDR_PROJECTS_9_3_3BF7CE82_is1) (Version: 9.23 - Franzis Verlag GmbH)
HDR projects photo (64-Bit) (HKLM\...\HDR_PROJECTS_2_1_3BF7CE82_is1) (Version: 2.26 - Franzis Verlag GmbH)
Helm (HKLM\...\{971514BD-7CC3-414F-9258-B79E6D53EC46}) (Version: 0.9.0.0 - Matt Tytel)
High-Definition Video Playback (HKLM-x32\...\{9193490D-5229-4FC4-9BB9-A6D63C09574A}) (Version: 11.0.12200.1.158 - Nero AG) Hidden
Image Composite Editor (HKLM\...\{92AB5708-1AAA-4B1B-A8D5-45CF3AD77519}) (Version: 2.0.3 - Microsoft Corporation)
indii.org/tintii (HKLM-x32\...\tintii) (Version: - )
Inkscape 0.92.4 (HKLM-x32\...\Inkscape) (Version: 0.92.4 - Inkscape Project)
Intel Driver && Support Assistant (HKLM-x32\...\{90EFD4CC-39A4-4470-AEEB-878CB2BCBC81}) (Version: 25.4.36.6 - Intel) Hidden
Intel Driver & Support Assistant (HKLM-x32\...\{4152D055-4116-42A3-BC9E-86D0A17B35A5}) (Version: 25.4.36.6 - Intel)
Java 8 Update 241 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180241F0}) (Version: 8.0.2410.7 - Oracle Corporation)
Krita (x64) 5.2.11 (git a4da714) (HKLM\...\Krita_x64) (Version: 5.2.11.0 - Krita Foundation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Leap Motion Profile v1.0 Trial for Motion LIVE 2D Plug-in (HKLM-x32\...\{CB332079-D416-45F6-9444-A6F651AE663C}) (Version: 1.0.1707.1 - Reallusion Inc.)
LibreCAD (HKLM-x32\...\LibreCAD) (Version: 2.1.3 - LibreCAD Team)
LibreOffice 25.2.5.2 (HKLM\...\{751B7B9A-39A0-428C-963B-0FA2B4BDD27F}) (Version: 25.2.5.2 - The Document Foundation)
Lightkey (HKLM\...\{AB7B36EE-A1FC-42CE-9E9C-ECEF2B2DD2AB}) (Version: 24.0.5.0 - Lightkey Sources LTD) Hidden
Live Billiards 2 (HKLM-x32\...\Live Billiards 2) (Version: - )
LMMS 1.2.1 (HKLM-x32\...\LMMS) (Version: 1.2.1 - LMMS Developers)
Logi Bolt (HKLM\...\LogiBolt) (Version: 1.2.6024.0 - Logi)
Logi Options+ (HKLM\...\{850cdc16-85df-4052-b06e-4e3e9e83c5c6}) (Version: 1.60.495862 - Logitech)
Logitech Options (HKLM\...\LogiOptions) (Version: 9.70.68 - Logitech)
Logitech Unifying-Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech)
LOOXIS Faceworx 1.0 (HKLM-x32\...\LOOXIS Faceworx_is1) (Version: 1.0.0.1 - LOOXIS GmbH)
Luminance HDR 2.5.1 (HKLM\...\{7020FC34-6E04-4858-924D-354B28CB2402}_is1) (Version: - Luminance HDR Dev Team)
Luminance Studio (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Luminance Studio) (Version: - )
Luminar 4 (HKLM\...\Luminar 4) (Version: 4.3.4.9699 - Skylum)
LUT #1 (HKLM\...\LUT_1_2_CCD378F6_is1) (Version: 1.12 - Accelerated Vision UG)
makehuman-community (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\makehuman-community) (Version: 20200727 - Makehuman Community)
MakeMe3D (HKLM-x32\...\{C206BC46-62E0-41CB-0001-4DB984666A77}) (Version: 1.2.12.618 - Engelmann Media GmbH)
Malwarebytes version 5.4.5.226 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.4.5.226 - Malwarebytes)
MediaHuman Audio Converter Version 1.9.7 (HKLM-x32\...\MHAudioConverter_is1) (Version: 1.9.7 - MediaHuman)
MediBang Paint Pro 24.5.1 (64-bit) (HKLM\...\MediBang Paint Pro_is1) (Version: 24.5.1 - Medibang)
Microsoft Speichern als PDF oder XPS Add-In für 2007 Microsoft Office-Programme (HKLM-x32\...\{90120000-00B2-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft .NET Core Host - 3.1.32 (x64) (HKLM\...\{8A8E3A04-83BC-4CDE-9259-893B666C1AB1}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.32 (x64) (HKLM\...\{ABC6B3C2-1A8D-4C5E-AC16-C2AE44F02743}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.32 (x64) (HKLM\...\{A741B803-3F0E-4684-81EF-FC128D15A92C}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.32 (x64) (HKLM-x32\...\{784973c8-d618-4ac8-97ed-1fd52c5bdf2f}) (Version: 3.1.32.31915 - Microsoft Corporation)
Microsoft .NET Host - 6.0.36 (x64) (HKLM\...\{D6932D97-36F1-40B8-9CDC-CA8365B21000}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.22 (x64) (HKLM\...\{872CDB4B-5DDE-4297-BD19-C93B6C93E386}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.22 (x86) (HKLM-x32\...\{E3308628-44F2-49F2-B618-7735D528FAC2}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.36 (x64) (HKLM\...\{A9E32B25-994B-4856-A12B-0EBED3050410}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.22 (x64) (HKLM\...\{7A046DD7-9D61-4C5D-8F5E-24EE192B1B6A}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.22 (x86) (HKLM-x32\...\{4560BF00-0D8D-4FE8-84BA-83A208E9CB97}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.36 (x64) (HKLM\...\{C912E33F-956A-4921-9F55-CC11AE8F09AF}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.22 (x64) (HKLM\...\{C43A1A89-0CA5-43FD-BDC4-3B85DAD06A41}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.22 (x64) (HKLM-x32\...\{9a1a4be8-ffdb-48b5-b47b-f787981592d8}) (Version: 8.0.22.35427 - Microsoft Corporation)
Microsoft .NET Runtime - 8.0.22 (x86) (HKLM-x32\...\{3BAD90A6-48B6-4C89-97FF-02FEB96227C1}) (Version: 64.88.42551 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.22 - Shared Framework (x86) (HKLM-x32\...\{251a18cb-cb97-48e3-ac2c-f57e06f8ed25}) (Version: 8.0.22.25528 - Microsoft Corporation)
Microsoft ASP.NET Core 8.0.22 Shared Framework (x86) (HKLM-x32\...\{1DFBD7A0-CB7B-392F-B3B0-76B85C9B01EB}) (Version: 8.0.22.25528 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 143.0.3650.96 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 143.0.3650.96 - Microsoft Corporation) Hidden
Microsoft Expression Design 4 (HKLM-x32\...\{EDF6CEF3-8415-4868-8B1F-8D9E5FF8FC23}) (Version: 8.0.31217.1 - Microsoft Corporation) Hidden
Microsoft Expression Design 4 (HKLM-x32\...\Design_8.0.31217.1) (Version: 8.0.31217.1 - Microsoft Corporation)
Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0407-1000-0000000FF1CE}_HOMESTUDENTR_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Excel MUI (German) 2007 (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (HKLM-x32\...\{90120000-00A1-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (HKLM-x32\...\{90120000-001F-040C-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (HKLM-x32\...\{90120000-001F-0410-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (HKLM-x32\...\{90120000-002C-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{A23BFC95-4A73-410F-9248-4C2B48E38C49}) (Version: - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (HKLM\...\{90120000-002A-0407-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (HKLM-x32\...\{90120000-006E-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneNote - de-de (HKLM\...\OneNoteFreeRetail - de-de) (Version: 16.0.19426.20218 - Microsoft Corporation)
Microsoft Research Cliplets (HKLM\...\{A4DA1935-2F04-4AFF-BE48-085CCC7BD0CB}) (Version: 1.1.1 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35208 (HKLM-x32\...\{e90abaf0-d749-437b-ba99-cda1c84b6754}) (Version: 14.44.35208.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35208 (HKLM-x32\...\{5A76FFAE-36C5-4648-80BD-4BB5B6E971F0}) (Version: 14.44.35208 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35208 (HKLM-x32\...\{491C67BA-2F2F-4A90-B9DD-4C76BFDBEA02}) (Version: 14.44.35208 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{FD9D64F4-CAF5-3D23-845A-B843C78CC1A5}) (Version: 10.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.60825 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.60825 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM\...\{61D4736B-3325-4D4A-BD41-8BD206C6A86E}) (Version: 48.144.23186 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM-x32\...\{0532b8f2-12d7-43de-95fc-7b87006758a8}) (Version: 6.0.36.34217 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.22 (x64) (HKLM\...\{4CCC1CCD-6FA3-4DD5-A06B-E94EA90094CF}) (Version: 64.88.42561 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.22 (x64) (HKLM-x32\...\{a3899eef-6164-4d42-b8c3-95ae6a844821}) (Version: 8.0.22.35428 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.22 (x86) (HKLM-x32\...\{2d077ae0-4556-4d5a-aa87-4ea76e32ec2d}) (Version: 8.0.22.35428 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.22 (x86) (HKLM-x32\...\{AABE221C-DA7E-4DDA-9AD6-322E03B95E2D}) (Version: 64.88.42561 - Microsoft Corporation) Hidden
Microsoft_VC100_CRT_x86 (HKLM-x32\...\{6FDDB201-2CA0-42BD-973F-7B2C4A61EA3F}) (Version: 1.0.0 - Microsoft)
Microsoft_VC80_CRT_x86 (HKLM-x32\...\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}) (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (HKLM-x32\...\{08D2E121-7F6A-43EB-97FD-629B44903403}) (Version: 1.00.0000 - Adobe) Hidden
MixPad Musikstudio-Software (HKLM-x32\...\MixPad) (Version: 13.54 - NCH Software)
Motion LIVE 2D Plug-in v1.11 Trial for Cartoon Animator (HKLM-x32\...\{E88C8914-A4CC-46EA-BC9B-2CC2E8BA6163}) (Version: 1.11.1915.1 - Reallusion Inc.)
Motion LIVE Plug-in v1.02 Trial for iClone (HKLM-x32\...\{172D3046-1186-4FC8-822A-1120E398B938}) (Version: 1.02.1203.1 - Reallusion Inc.)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 102.6.1 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 140.1.1 (x64 de)) (Version: 140.1.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MuseScore 3 (HKLM\...\{778D5D3D-5448-40F4-AACC-47D443C3E8A1}) (Version: 3.4.2.9788 - Werner Schweer and Others)
Music Recorder (HKLM-x32\...\{F5EF0BCC-8370-431F-B73E-AC6405C2DA1D}) (Version: 14.1.15600.0 - Audials AG)
MyEpson Portal (HKLM-x32\...\{3361D415-BA35-4143-B301-661991BA6219}) (Version: 1.1.2.2 - SEIKO EPSON CORPORATION) Hidden
MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version: - SEIKO EPSON Corporation)
MyKeyFinder 2026 (HKLM-x32\...\{c6396ed4-bdba-4f98-8739-767cb6bd16e6}_is1) (Version: 15.01 - Abelssoft)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 2.1 - F.J. Wechselberger)
NEAT projects 3 professional (HKLM\...\NEAT_PROJECTS_3_3_Df337A2C_is1) (Version: 3.32 - Franzis Verlag GmbH)
Nero 11 (HKLM-x32\...\{EB475D31-14C0-4DC3-8E0A-8AE1711399B3}) (Version: 11.0.10100 - Nero AG)
Nero 11 Cliparts (HKLM-x32\...\{B160A672-F326-4414-9BB0-A056C61B357C}) (Version: 11.0.10600.6.0 - Nero AG) Hidden
Nero 11 Disc Menus 1 (HKLM-x32\...\{A0F34849-D9AB-46DD-B1BE-BB0DB60B1FE8}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Disc Menus 2 (HKLM-x32\...\{7DF2B5EE-2C16-4E86-9C71-8678068AD805}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Disc Menus 3 (HKLM-x32\...\{5E98FDD6-3672-4DBE-AB8B-2C9A0BED1382}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Disc Menus Basic (HKLM-x32\...\{F49EF443-B2BD-4F10-8A46-87AFCDB90EDD}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Effects Basic (HKLM-x32\...\{E51BC4B0-EA5E-49CC-AF3B-93B5C627EC22}) (Version: 11.0.10600.6.0 - Nero AG) Hidden
Nero 11 Image Samples (HKLM-x32\...\{F3743A2C-5D5F-4456-8F98-5DF36A954C50}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Kwik Themes 1 (HKLM-x32\...\{B1F69AF3-B5B5-4CA5-ADC5-8A738EB6E574}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Kwik Themes 2 (HKLM-x32\...\{A4F6BE36-4826-45BA-A396-04F265A3B61D}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 Kwik Themes Basic (HKLM-x32\...\{5A212B2D-140D-46F4-B625-2D1CA5A00594}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero 11 PiP Effects Basic (HKLM-x32\...\{2CA7225D-CB12-462A-9DD1-50319E158BA5}) (Version: 11.0.10600.6.0 - Nero AG) Hidden
Nero 11 Video Samples (HKLM-x32\...\{A2CDC001-F8B3-4C64-9E74-2E3FA0FAC9D9}) (Version: 11.0.10600.5.0 - Nero AG) Hidden
Nero Audio Pack 1 (HKLM-x32\...\{A7A0BF2E-31CC-49E3-9913-52C503EB969D}) (Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero BackItUp (HKLM-x32\...\{EA03E7E5-6757-4A9A-9B36-C0022BE752D2}) (Version: 18.0.3040 - Nero AG) Hidden
Nero BackItUp 11 (HKLM-x32\...\{AB2BBC64-8AC8-4E66-BBF3-E22D5EACEECA}) (Version: 6.0.10700.6.100 - Nero AG) Hidden
Nero BackItUp 11 Help (CHM) (HKLM-x32\...\{6AB2427E-A18F-4809-9A12-29F5EBABBB3A}) (Version: 11.0.10000 - Nero AG) Hidden
Nero BackItUp 2017 Essentials (HKLM-x32\...\{0A5CD1E5-5F6E-4E9B-AAE6-E368D1784693}) (Version: 18.1.00100 - Nero AG)
Nero Burning ROM 11 (HKLM-x32\...\{9D8491AD-D0D2-4B51-AA4A-A8B67795A553}) (Version: 11.0.10700.12.100 - Nero AG) Hidden
Nero Burning ROM 11 Help (CHM) (HKLM-x32\...\{53F7746A-96AA-49A5-86B8-59989680DAC5}) (Version: 11.0.10000 - Nero AG) Hidden
Nero ControlCenter (HKLM-x32\...\{ABC88553-8770-4B97-B43E-5A90647A5B63}) (Version: 11.4.0006 - Nero AG) Hidden
Nero ControlCenter 11 Help (CHM) (HKLM-x32\...\{D4D66270-9147-4BDF-9946-FCA2B303AA8F}) (Version: 11.0.10000 - Nero AG) Hidden
Nero Core Components (HKLM-x32\...\{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}) (Version: 11.6.0023 - Nero AG) Hidden
Nero CoverDesigner 11 (HKLM-x32\...\{FF44BCE5-5A18-4051-85F0-BC172D7B4695}) (Version: 6.0.10500.8.100 - Nero AG) Hidden
Nero CoverDesigner 11 Help (CHM) (HKLM-x32\...\{55C2143E-FBA5-442F-9AFA-726FF068F39D}) (Version: 11.0.10000 - Nero AG) Hidden
Nero Express 11 (HKLM-x32\...\{E10AAE4A-98B8-420A-BD93-E0520C23D624}) (Version: 11.0.10700.12.100 - Nero AG) Hidden
Nero Express 11 Help (CHM) (HKLM-x32\...\{D2CBEFA4-F2D3-4E97-A171-8BFD6A31A5EC}) (Version: 11.0.10000 - Nero AG) Hidden
Nero Kwik Media (HKLM-x32\...\{BE814218-3919-4EA3-868A-2F60BC135CB4}) (Version: 1.10.14100.42.100 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (HKLM-x32\...\{B9B1BA7F-7E07-49DD-A713-5B397A5BB66B}) (Version: 11.0.10000 - Nero AG) Hidden
Nero Recode 11 (HKLM-x32\...\{4162E4B4-DB62-4719-9921-A59B2671C1CB}) (Version: 5.0.11300.15.100 - Nero AG) Hidden
Nero Recode 11 Help (CHM) (HKLM-x32\...\{57F80ECF-E27C-4EEE-AB58-E971BACE2639}) (Version: 11.0.10000 - Nero AG) Hidden
Nero RescueAgent 11 (HKLM-x32\...\{034DCAF9-96E7-4936-9A07-712F80B5181E}) (Version: 4.0.10300.7.100 - Nero AG) Hidden
Nero RescueAgent 11 Help (CHM) (HKLM-x32\...\{D01CE99A-8802-483C-A79F-298B691EB432}) (Version: 11.0.10000 - Nero AG) Hidden
Nero SoundTrax 11 (HKLM-x32\...\{0713D1F9-DD77-42C1-8C7D-54D479E2E743}) (Version: 5.0.10300.3.100 - Nero AG) Hidden
Nero SoundTrax 11 Help (CHM) (HKLM-x32\...\{390757AA-8830-43DC-AEE0-4E5B6F8439EB}) (Version: 11.0.10000 - Nero AG) Hidden
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 11.0.13600.45.0 - Nero AG) Hidden
Nero Video 11 (HKLM-x32\...\{0D7A4289-99CF-4B8D-B812-86BE50A54552}) (Version: 8.0.12900.10.100 - Nero AG) Hidden
Nero Video 11 Help (CHM) (HKLM-x32\...\{FAC3C37E-EDAB-4F3A-A173-A7C70CC88F09}) (Version: 11.0.10000 - Nero AG) Hidden
Nero WaveEditor 11 (HKLM-x32\...\{8014FACB-1D1D-48C2-94AA-E29EE2E6B9CE}) (Version: 6.0.10500.3.100 - Nero AG) Hidden
Nero WaveEditor 11 Help (CHM) (HKLM-x32\...\{EB8DED20-A887-4A9C-BB5A-F3E7523DFB44}) (Version: 11.0.10000 - Nero AG) Hidden
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
O&K Print Router (HKLM-x32\...\O&K Print Router) (Version: 3.0 - O&K Software Ltd.)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.19426.20170 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.19426.20170 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.19426.20170 - Microsoft Corporation) Hidden
onlineTV 18 (HKLM-x32\...\{58B7E23E-64FF-4A70-83EB-8CAF8FE5A78B}_is1) (Version: 18.22.11.3 - concept/design GmbH)
OpenOffice 4.1.15 (HKLM-x32\...\{D8DD7A6F-CB70-43AF-9A0C-9A5A4C195068}) (Version: 4.115.9813 - Apache Software Foundation)
Opera Mail 1.0 (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Opera 1.0.1044) (Version: 1.0.1044 - Opera Software ASA)
Opera Stable 125.0.5729.49 (HKLM-x32\...\Opera 125.0.5729.49) (Version: 125.0.5729.49 - Opera Software)
OptiTrack Profile v1.02 Trial for Motion LIVE Plug-in (HKLM-x32\...\{DF3F118D-8794-48E8-9228-3DF9C437A731}) (Version: 1.02.1130.1 - Reallusion Inc.)
Overlay Effects for Lightroom Version 1.0.3 (HKLM\...\{A2AEED12-A791-4AB5-B9FB-231B4129000E}_is1) (Version: 1.0.3 - Picture Instruments)
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 11.27.0 (64 Bit) (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.27.0 - Geek Software GmbH)
PDF24 Creator 11.28.2 (32 Bit) (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.28.2 - Geek Software GmbH)
Perception Neuron Profile v1.0 Trial for Motion LIVE 2D Plug-in (HKLM-x32\...\{3A2CF4BF-6F79-46DC-9DF3-50CB0026D4D6}) (Version: 1.0.1707.1 - Reallusion Inc.)
Perception Neuron Profile v1.02 Trial for Motion LIVE Plug-in (HKLM-x32\...\{436D8673-70A9-4D07-AD78-51DE4BA7B982}) (Version: 1.02.1130.1 - Reallusion Inc.)
PHOTOfunSTUDIO 9.7 PE (HKLM-x32\...\{2A71E3D5-1714-4E8F-88CD-7C06894FA6A2}) (Version: 9.07.706.1031 - Panasonic Corporation)
Photopea PSD Editor Plug-in v1.0 for Cartoon Animator (HKLM-x32\...\{EDAFF67C-096E-4A7B-B3CD-8CFAB4384934}) (Version: 1.0.1016.1 - Reallusion Inc.)
PopcornFX Plug-in v1.01 Trial for iClone (HKLM-x32\...\{D719716D-0502-452D-ABC8-F88235049A9A}) (Version: 1.01.1519.1 - Reallusion Inc.)
Qualisys Profile v1.0 Trial for Motion LIVE Plug-in (HKLM-x32\...\{8B19FF77-91D0-4EEA-86D8-2D1C868D0A7A}) (Version: 1.0.0618.1 - Reallusion Inc.)
QuickTime (HKLM-x32\...\{C78EAC6F-7A73-452E-8134-DBB2165C5A68}) (Version: 7.62.14.0 - Apple Inc.)
RawTherapee Version 5.4 (HKLM\...\RawTherapee5.4_is1) (Version: 5.4 - rawtherapee.com)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.)
Realtek USB Wireless LAN Driver (HKLM-x32\...\InstallShield_{DBCC4C27-F949-482b-B786-7B3B67587CD2}) (Version: Drv_3.00.0019 - REALTEK Semiconductor Corp.)
Recordify 2023 (HKLM-x32\...\{E25B0FAA-66E5-4D2E-9B48-3B85B31543BF}_is1) (Version: 8.03 - Abelssoft)
Revo Uninstaller 2.6.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.5 - VS Revo Group, Ltd.)
Rokoko Profile v1.0 Trial for Motion LIVE 2D Plug-in (HKLM-x32\...\{68BED2C8-814B-4F18-825D-AB06C3D06CB7}) (Version: 1.0.1924.1 - Reallusion Inc.)
Rokoko Profile v1.02 Trial for Motion LIVE Plug-in (HKLM-x32\...\{2719BB11-4A27-4C34-9205-0349E860E20F}) (Version: 1.02.1130.1 - Reallusion Inc.)
ScreenCamera.Net registered to GiveAwayOfTheDay Version 1.4.5.41 (HKLM-x32\...\{6C47663A-C5B9-4404-A4BA-E75392F33B2C}_is1) (Version: 1.4.5.41 - PCWinSoft Software)
SHARPEN #5 professional (HKLM\...\SHARPEN_5_3_FCDF957E_is1) (Version: 5.41 - Accelerated Vision UG)
SILKYPIX Developer Studio 3.0 SE (HKLM-x32\...\InstallShield_{B2F25F71-D920-4288-A548-54CD253DEF14}) (Version: 3 - Ichikawa Soft Laboratory)
SILKYPIX Developer Studio 8 SE (HKLM-x32\...\{593959B5-2971-430C-82C2-6F51C7EE8B34}) (Version: 8 - Ichikawa Soft Laboratory)
SlimDX Runtime .NET 4.0 x86 (January 2012) (HKLM-x32\...\{7EBD0E43-6AC0-4CA8-9990-00E50069AD29}) (Version: 2.0.13.43 - SlimDX Group)
Smart Gallery Plug-in v1.12 for iClone (HKLM-x32\...\{4581D025-E559-40F4-A655-3243C877EABC}) (Version: 1.12.0827.1 - Reallusion Inc.)
Smart Gallery Plug-in v1.31 for Character Creator (HKLM-x32\...\{F33C21BF-AB8E-4196-BAD3-A5FC1BF40632}) (Version: 1.31.2226.1 - Reallusion Inc.)
SmartTools Servicepack 2018 für Excel (HKLM-x32\...\{07B86ED7-55AC-49C0-9814-B070B969DC62}) (Version: 1.0.3.0 - SmartTools Publishing)
Software Informer 1.4.1305.0 (HKLM\...\Software Informer_is1) (Version: - Informer Technologies, Inc.)
Spotify (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\Spotify) (Version: 1.2.44.405.g81fd6352 - Spotify AB)
Spyder4Elite (HKLM-x32\...\Spyder4Elite) (Version: - )
SpyderPRINT (HKLM-x32\...\SpyderPRINT) (Version: - )
SpyderStudio (HKLM-x32\...\SpyderStudio) (Version: - )
Sqirlz Morph (HKLM-x32\...\Sqirlz Morph) (Version: 2.0 - xiberpix)
Sweet Home 3D version 6.1.2 (HKLM\...\Sweet Home 3D_is1) (Version: 6.1.2 - eTeks)
Switch Audio-Converter (HKLM-x32\...\Switch) (Version: 13.24 - NCH Software)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synfig Studio (64bit) (HKLM\...\synfigstudio) (Version: 1.2.2-286f1 - )
Tablet Driver With Macrokey Manager (HKLM\...\RmTablet) (Version: 4.13 - )
ThunderSoft GIF Converter (3.1.0.0) (HKLM-x32\...\ThunderSoft GIF Converter_is1) (Version: 3.1.0.0 - ThunderSoft)
TuneFab Spotify Music Converter 3.1.23 (HKLM\...\9ff685d9-8f1e-59e1-a273-b7c9e7cf0c17) (Version: 3.1.23 - TuneFab)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Update Notifier (HKLM\...\{A0CA66DA-49B3-4D6F-92EA-B4CBC60365E0}) (Version: 3.0.0.73 - MAGIX Software GmbH) Hidden
Update Notifier (HKLM\...\MX.{A0CA66DA-49B3-4D6F-92EA-B4CBC60365E0}) (Version: 3.0.0.73 - MAGIX Software GmbH)
Videomizer 2 (HKLM-x32\...\{B84CB121-58A9-4D5E-0001-805171E318F3}) (Version: 2.0.16.504 - Engelmann Media GmbH)
VideoPad Video-Editor (HKLM-x32\...\VideoPad) (Version: 17.48 - NCH Software)
VideoProc Converter (HKLM-x32\...\VideoProc Converter) (Version: 4.4 - Digiarty, Inc.)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.16 - VideoLAN)
VLC Plus Player Updater (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\AM VLC Plus Player Updater) (Version: 1.0.2 - ) <==== ACHTUNG
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Watermark Software 8.3 (HKLM-x32\...\Watermark Software) (Version: 8.3 - watermark-software.com)
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 20.54 - NCH Software)
welcome (HKLM-x32\...\{CCE210DF-7EEF-4A76-A63C-3EB091FDB992}) (Version: 11.0.20000.0.0 - Nero AG) Hidden
WhatsApp (Outdated) (HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\WhatsApp) (Version: 2.2326.10 - WhatsApp)
Wi-Fi-Adapter (HKLM\...\{5A93E57B-A092-48B9-9A5A-7F7218FF8F29}_is1) (Version: 1.0.0.10 - Ugreen)
Windows 7 Games for Windows 10 and 8 (HKLM\...\Win7Games) (Version: 2.0 - hxxp://winaero.com)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC [2025-12-23] ()
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_6.0.0.1_x86__enpm4xejd91yc [2024-12-12] (Adobe Systems Incorporated)
Adobe Photoshop Express: Image Editor, Änderungen, Filter, Effekte, Rahmen -> C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobePhotoshopExpress_3.6.392.0_x64__mtcwf2zmmt10c [2023-01-26] (Adobe Inc.)
Adobe XD -> C:\Program Files\WindowsApps\Adobe.XD_51.0.12.6_x64__pc75e8sa7ep4e [2023-01-26] (Adobe Inc.)
Adobe-Fresco -> C:\Program Files\WindowsApps\Adobe.Fresco_3.2.0.745_x64__pc75e8sa7ep4e [2023-01-26] (Adobe Inc.)
Amazon.de: Amazon Prime -> C:\Program Files\WindowsApps\www.amazon.de-22BA6F70_1.0.0.1_neutral__v3aseepm5s0mp [2025-12-28] (www.amazon.de)
ARD Audiothek -> C:\Program Files\WindowsApps\www.ardaudiothek.de-6D6467DE_1.0.0.2_neutral__x8af41t9fvg4c [2025-12-28] (www.ardaudiothek.de)
Deutsch - Plattdeutsch Übersetzer - AI Translator Mr. Dialect -> C:\Program Files\WindowsApps\mr-dialect.com-75DB0486_1.0.0.1_neutral__r4bnghda1b544 [2025-12-28] (mr-dialect.com)
FloraWeb - Willkommen bei FloraWeb -> C:\Program Files\WindowsApps\www.floraweb.de-B816B02A_1.0.0.1_neutral__vc34710g4vf76 [2025-12-28] (www.floraweb.de)
Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation)
FreeCell -> C:\Program Files\WindowsApps\www.free-freecell-solitaire.com-A837CC6C_1.0.0.2_neutral__x3j35fb5y4knr [2025-12-28] (www.free-freecell-solitaire.com)
FreeCell HD -> C:\Program Files\WindowsApps\32988BernardoZamora.Dummy2_1.26.88.0_x64__1fgex2kbsn6g8 [2025-12-29] (Bernardo Zamora)
FreeCell Solitaire!! -> C:\Program Files\WindowsApps\476931bsyl.FreeCellSolitaire_1.6.0.0_x64__cgv7566y2ek3j [2025-12-16] (1bsyl)
FreeCell Solitär -> C:\Program Files\WindowsApps\TreeCardGames.FreeCellCollectionFree_5.3.2.0_x64__n666hb6ddc5jp [2023-07-12] (TreeCardGames)
Günther Blaich - Europäische Orchideen und andere Pflanzen - European orchids and other plants -> C:\Program Files\WindowsApps\www.guenther-blaich.de-B1F64B0B_1.0.0.0_neutral__8msq1feav1cr6 [2023-03-31] (www.guenther-blaich.de)
Günther Blaich - Europäische Orchideen und andere Pflanzen - European orchids and other plants -> C:\Program Files\WindowsApps\www.guenther-blaich.de-C2737558_1.0.0.1_neutral__8msq1feav1cr6 [2023-10-16] (www.guenther-blaich.de)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_162.3.1128.0_x64__v10z8vjag6ke6 [2025-12-29] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa [2025-12-29] (Apple Inc.) [Startup Task]
Joyn -> C:\Program Files\WindowsApps\www.joyn.de-DEF5F6A1_1.0.0.1_neutral__pcbtsyen7zd6j [2025-12-28] (www.joyn.de)
Klimazonen in Deutschland und Winterhärte -> C:\Program Files\WindowsApps\www.garten-pur.de-3CD2266D_1.0.0.1_neutral__fs8jqsebezzny [2025-12-28] (www.garten-pur.de)
Kodi -> C:\Program Files\WindowsApps\XBMCFoundation.Kodi_21.2.500.0_x64__4n2hpmxwrvr6p [2025-12-29] (XBMC Foundation)
Local AI Manager for Microsoft 365 -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\AI [2025-12-23] ()
Mahjong Solitaire -> C:\Program Files\WindowsApps\7333BvG.MahjongSolitaireFree_2.9.4.0_x64__y1s27y3vcjf5c [2025-12-29] (BvG)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation)
Mein schöner Garten: Pflanzen, Garten & Gartentipps. -> C:\Program Files\WindowsApps\www.mein-schoener-garten.de-59EACECB_1.0.0.2_neutral__7cmmreg3ma958 [2025-12-28] (www.mein-schoener-garten.de)
Mein schöner Garten: Pflanzen, Garten & Gartentipps. -> C:\Program Files\WindowsApps\www.mein-schoener-garten.de-FEC576CC_1.0.0.0_neutral__7cmmreg3ma958 [2023-03-31] (www.mein-schoener-garten.de)
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1805.2.0_x64__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1805.2.0_x86__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2023-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Jigsaw -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJigsaw_2.8.4231.0_x86__8wekyb3d8bbwe [2025-12-29] (Microsoft Studios)
Microsoft Midi gm.dls -> C:\Program Files\WindowsApps\Microsoft.Midi.GmDls_1.0.1.0_neutral__8wekyb3d8bbwe [2023-01-26] (Microsoft Platform Extensions)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_55.20610.576.0_x64__8wekyb3d8bbwe [2025-12-29] (Microsoft Corporation)
Microsoft Word - 47_Pflanzenportraet_Sauromatum_guttatum.doc -> C:\Program Files\WindowsApps\www.botanik-bochum.de-1D8C8514_1.0.0.1_neutral__tf53kk577w776 [2025-12-28] (www.botanik-bochum.de)
Microsoft.Office.ActionsServer -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\ActionsServer [2025-12-23] ()
Moser Care and Support Wear -> C:\Program Files\WindowsApps\www.mosercare.de-5945C851_1.0.0.1_neutral__dkwc0jk62d6fr [2025-12-28] (www.mosercare.de)
NaturaDB - Finde die passenden Pflanzen. -> C:\Program Files\WindowsApps\www.naturadb.de-BAD1CB5_1.0.0.1_neutral__b30na7fkwqa6g [2025-12-28] (www.naturadb.de)
Netzkino -> C:\Program Files\WindowsApps\35124netzkino.Netzkino_3.3.1.1_neutral__843rhjq2hbnd4 [2023-01-26] (netzkino) [MS Ad]
Niedersachsens Kliniken im Check Januar 2025: Was leisten sie in der Knie- und Hüftmedizin? news.de -> C:\Program Files\WindowsApps\www.news.de-DF263BF_1.0.0.1_neutral__wm4rcazk6szy8 [2025-12-28] (www.news.de)
OfficePushNotificationsUtility -> C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16 [2025-12-23] ()
Öffnen, Bearbeiten und Konvertieren von ATN-Dateien DateiWiki Blog -> C:\Program Files\WindowsApps\datei.wiki-A4EBD80C_1.0.0.1_neutral__pbgnkrshpkp7g [2025-12-28] (datei.wiki)
OneLaunch -> C:\Program Files\WindowsApps\getmanualssearch.com-DE6DDF6C_1.0.0.3_neutral__eg3srx13a0kee [2025-12-28] (getmanualssearch.com)
Översetter: Hochdeutsch - Plattdeutsch Übersetzer -> C:\Program Files\WindowsApps\www.xn-versetter-z7a.de-BE380337_1.0.0.1_neutral__2v621k8gjawty [2025-12-28] (www.översetter.de)
PayPal -> C:\Program Files\WindowsApps\www.paypal.com-36CE595_1.0.0.1_neutral__vct904jxvz49g [2025-12-28] (www.paypal.com)
PDF Converter -> C:\Program Files\WindowsApps\AnywaySoftInc.PDFConverter_2.0.9.0_x64__0qkrc2qacwvfm [2023-01-26] (AnywaySoft, Inc.) [MS Ad]
Prime Video for Windows -> C:\Program Files\WindowsApps\AmazonVideo.PrimeVideo_1.1.6.0_x64__pwbj9vvecjh7j [2025-12-29] (Amazon Development Centre (London) Ltd)
Promesse de fleurs, Qualitätspflanzen seit 1950 -> C:\Program Files\WindowsApps\www.promessedefleurs.de-649494B7_1.0.0.1_neutral__yfvr7wv0rmg4y [2025-12-28] (www.promessedefleurs.de)
Saatgut-Vielfalt www.saatgut-vielfalt.de -> C:\Program Files\WindowsApps\www.saatgut-vielfalt.de-59A19251_1.0.0.0_neutral__nx0er27znpjwg [2023-03-31] (www.saatgut-vielfalt.de)
Saatgut-Vielfalt www.saatgut-vielfalt.de -> C:\Program Files\WindowsApps\www.saatgut-vielfalt.de-FBA683DE_1.0.0.2_neutral__nx0er27znpjwg [2025-12-28] (www.saatgut-vielfalt.de)
Sinar - Fotografie & Videografie Leicht Gemacht -> C:\Program Files\WindowsApps\sinar.ch-D6790AE4_1.0.0.1_neutral__jvgj41ckkxmet [2025-12-28] (sinar.ch)
Solitaire FRVR -> C:\Program Files\WindowsApps\www.msn.com-8E02E2B_1.0.0.0_neutral__q77jw2zwjvy92 [2023-02-12] (www.msn.com)
Solitaire FRVR -> C:\Program Files\WindowsApps\www.msn.com-F79F426E_1.0.0.1_neutral__q77jw2zwjvy92 [2023-10-16] (www.msn.com)
Startseite Staudenfreunde -> C:\Program Files\WindowsApps\gds-staudenfreunde.de-1C4B8435_1.0.0.1_neutral__qg9r9qvxrk70j [2025-12-28] (gds-staudenfreunde.de)
Staudengärtnerei Gaißmayer (Pflanzendaten) -> C:\Program Files\WindowsApps\www.gaissmayer.de-6C5CE7BE_1.0.0.0_neutral__0k7pksr2c3c5c [2023-03-31] (www.gaissmayer.de)
Staudengärtnerei Gaißmayer (Pflanzendaten) -> C:\Program Files\WindowsApps\www.gaissmayer.de-9769D9E9_1.0.0.1_neutral__0k7pksr2c3c5c [2023-10-16] (www.gaissmayer.de)
VLC -> C:\Program Files\WindowsApps\VideoLAN.VLC_3.2.1.0_x64__paz6r1rewnh0a [2024-07-27] (VideoLAN)
Waldsteinia lobata (Waldsteinia mit Lappen, Barren Erdbeere mit Lappen, Barren Strawberry mit Lappen) - Verwendung, Vorteile und gebräuchliche Namen -> C:\Program Files\WindowsApps\www.selinawamucii.com-E8D51AEE_1.0.0.1_neutral__h77grymjjvpty [2025-12-28] (www.selinawamucii.com)
Was sind Winterhärtezonen? - Plantura -> C:\Program Files\WindowsApps\www.plantura.garden-731F3C29_1.0.0.1_neutral__javay0bkw47v8 [2025-12-28] (www.plantura.garden)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2587.9.0_x64__cv1g1gvanyjgm [2025-12-30] (WhatsApp Inc.) [Startup Task]
Wie man Hybrid-Windröschen anbaut und pflegt -> C:\Program Files\WindowsApps\www.picturethisai.com-B4712BF1_1.0.0.1_neutral__8pemh7k5ekhyc [2025-12-28] (www.picturethisai.com)
Winterhärtezonen im Überblick winterharte Pflanzen · Wächter Pflanzencenter -> C:\Program Files\WindowsApps\www.waechter-pflanzencenter.de-77D2E06F_1.0.0.1_neutral__q6m5ceemv6ndm [2025-12-28] (www.waechter-pflanzencenter.de)
YouTube -> C:\Program Files\WindowsApps\www.youtube.com-54E21B02_1.0.0.2_neutral__pd8mbgmqs65xy [2025-12-28] (www.youtube.com)
Zeigerwerte -> C:\Program Files\WindowsApps\www.oekologie-seite.de-1DA4294D_1.0.0.1_neutral__3n8wxn7ejyg7w [2025-12-28] (www.oekologie-seite.de)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\ChromeHTML: -> <==== ACHTUNG
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-9973BD01F8E3} -> [Creative Cloud Files] => C:\Users\Horst\Creative Cloud Files [2020-06-20 18:33]
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> "C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{1AC77AE9-9EC6-405A-9F9B-C06AB3C10B71}\InprocServer32 -> C:\Program Files\Microsoft Research\Image Composite Editor\ShellExtension.dll (Microsoft Corporation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> "C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{7B8A4895-8074-9EBA-2B64-0C2FC00AEDCE}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{97D9AC27-40D1-4F2B-973E-C8190480E3D9}\localserver32 -> C:\Users\Horst\AppData\Local\1&1 Mail & Media GmbH\MCDS\1\Application\1\activator.exe (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{9A527227-46B8-45B1-9BDF-62E4C71CC055}\InprocServer32 -> C:\Users\Horst\AppData\Local\1&1 Mail & Media GmbH\MCDS\1\Application\1\dbc.dll (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{AB9B6851-C94E-43B7-A304-F40DEA3FA09F}\localserver32 -> "c:\program files\musehub\current\musehub.exe" ----AppNotificationActivated: => Keine Datei
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{ACEA8D04-E06D-805A-1F4B-6A46CE1EB7EE}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{AEBAFF06-B83A-4F24-9CC1-D63F9EAA2F86}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender 2.93\BlendThumb.dll (Stichting Blender Foundation -> )
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-12-12] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-12-12] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-12-12] (Adobe Inc. -> )
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-08-03] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-12-12] (Adobe Inc. -> )
ContextMenuHandlers1-x32: [ASZipF] -> {e03d3e68-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\ASZSHLEXT.DLL [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers1: [ASZipF64] -> {e03d3e78-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\aszshlext64.dll [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers1: [MVDShlext] -> {027B567F-6B25-42C1-9C0B-5CE8E04024BD} => -> Keine Datei
ContextMenuHandlers1-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-30] (F.J. Wechselberger) [Datei ist nicht signiert]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-01-05] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-08-03] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [MGFolderIconBasicShellEx] -> {6b3c2037-775b-3a6e-9773-0bfcc92d8947} => G:\Program Files\MSTechFolderIconBasicShellEx.DLL -> Keine Datei
ContextMenuHandlers4: [MVDShlext] -> {027B567F-6B25-42C1-9C0B-5CE8E04024BD} => -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxDTCM.dll [2022-07-29] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-08-03] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-12-12] (Adobe Inc. -> )
ContextMenuHandlers6-x32: [ASZipF] -> {e03d3e68-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\ASZSHLEXT.DLL [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers6: [ASZipF64] -> {e03d3e78-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\aszshlext64.dll [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2017-08-19] (Foxit Software Incorporated -> Foxit Software Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-01-05] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Drivers32: [VIDC.MPG4] => C:\Windows\SysWOW64\mpg4c32.dll [420240 2006-10-11] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Drivers32: [VIDC.MP42] => C:\Windows\SysWOW64\mpg4c32.dll [420240 2006-10-11] (Microsoft Corporation -> Microsoft Corporation)
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Horst\Favorites\Fotor for desktop.lnk -> hxxp://www.fotor.com/windows/review.htm
ShortcutWithArgument: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__jolaaineabphadfbdnebehahbneddjib\Mein schöner Garten Pflanzen, Garten & Gartentipps.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=jolaaineabphadfbdnebehahbneddjib --app-url=hxxps://www.mein-schoener-garten.de/ --app-launch-source=4
ShortcutWithArgument: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__jihamkfopolkefphcacleadneejocbjp\Saatgut-Vielfalt www.saatgut-vielfalt.de.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=jihamkfopolkefphcacleadneejocbjp --app-url=hxxps://www.saatgut-vielfalt.de/inhalt/geschichte --app-launch-source=4
ShortcutWithArgument: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__hokbbolikgdbclpcibfeflcdfilocfnl\Mahjong Deluxe.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=hokbbolikgdbclpcibfeflcdfilocfnl --app-url=hxxps://www.msn.com/de-de/play/mahjong-deluxe/cg-9pg0crrcqq20?ocid=cgpwa --app-launch-source=4
ShortcutWithArgument: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__gmjobpdpodpojmpfpjljmgfjgikblaak\Staudengärtnerei Gaißmayer (Pflanzendaten).lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=gmjobpdpodpojmpfpjljmgfjgikblaak --app-url=hxxps://www.gaissmayer.de/web/shop/themenwelten/mit-stauden-gestalten/wild-und-naturgarten/stauden-fuer-naturnahe-pflanzungen/51/malva-sylvestris-var-mauritiana/8908/ --app-launc
ShortcutWithArgument: C:\Users\Horst\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__feeiifojcffkbednfkadleihdgbndnlh\Günther Blaich - Europäische Orchideen und andere Pflanzen - European orchids and other plants.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=feeiifojcffkbednfkadleihdgbndnlh --app-url=hxxp://www.guenther-blaich.de/ --app-launch-source=4
ShortcutWithArgument: C:\Users\Horst\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2017-09-25 21:05 - 2009-04-03 17:51 - 000336896 _____ (CANON INC.) [Datei ist nicht signiert] C:\WINDOWS\System32\CNMN6PPM.DLL
2016-09-14 13:31 - 2016-09-14 13:31 - 000500736 ____S (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\WINDOWS\System32\enppmon.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\LOOXIS:{4A003100-7400-7300-4200-740077005100} [704]
AlternateDataStreams: C:\LOOXIS:{61004700-7900-7600-6E00-630043005400} [236]
AlternateDataStreams: C:\LOOXIS:{6E005900-4D00-2B00-4F00-4D0078006900} [704]
AlternateDataStreams: C:\ProgramData:NetOptimizer [294]
AlternateDataStreams: C:\Windows:CM_4536bcf519c7a8c697b63cf41dd9239b7eb9593ecc22faca240a5b6a64c20234 [74]
AlternateDataStreams: C:\Windows:CM_a751d84a57a0954e38fd5e625c6d6d4047d58bde2aeb7d4a85f5a8d2724b91d4 [74]
AlternateDataStreams: C:\Users\All Users:NetOptimizer [294]
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NetOptimizer [294]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:3241321C [131]
AlternateDataStreams: C:\ProgramData\TEMP:810B9F0D [130]
AlternateDataStreams: C:\ProgramData\TEMP:B56E7461 [302]
AlternateDataStreams: C:\ProgramData\TEMP:DFB59A96 [122]
AlternateDataStreams: C:\Users\Horst\Documents\Apache_OpenOffice_V4.1.15.exe:BDU [0]
AlternateDataStreams: C:\Users\Horst\Documents\ashampoo_backup_2023_38725.exe:BDU [0]
AlternateDataStreams: C:\Users\Horst\Documents\ChromeSetup.exe:BDU [0]
AlternateDataStreams: C:\Users\Horst\Documents\OperaSetup (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Horst\Documents\Opera_111.0.5168.43_Setup_x64.exe:BDU [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {31BD138B-6AC5-484C-96F4-3E49E2D78DFC} URL = hxxps://go.gmx.net/br/ie_search_shopping/splugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {5083A602-2A2F-48B6-9E01-A949E74DF6BB} URL = hxxps://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {7B0DE5C9-898F-45E0-8C19-FECF88DC9136} URL = hxxps://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {8DE2F24E-0A2C-40B6-90C7-E11B772EF774} URL = hxxps://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {D8D808CB-8DD2-4649-906F-5F44064DAE80} URL = hxxps://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_241\bin\ssv.dll [2020-01-27] (Oracle America, Inc. -> Oracle Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
BHO: GMX MailCheck BHO -> {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} -> C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll [2022-08-10] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-01-27] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
BHO-x32: GMX MailCheck BHO -> {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} -> C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll [2022-08-10] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Toolbar: HKLM - Kein Name - {C424171E-592A-415a-9EB1-DFD6D95D3530} - Keine Datei
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - Kein Name - {C424171E-592A-415a-9EB1-DFD6D95D3530} - Keine Datei
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll [2022-08-10] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Handler-x32: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\GMX MailCheck\IE\GMX_MailCheck.dll [2022-08-10] (1&1 Mail & Media GmbH -> 1und1 Mail und Media GmbH)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2025-12-22] (Microsoft Corporation -> Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Da befinden sich 7940 mehr Seiten.
IE trusted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\localhost -> localhost
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\123simsen.com -> www.123simsen.com
Da befinden sich 7944 mehr Seiten.
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2017-09-29 14:46 - 2016-07-16 12:45 - 000000824 ____N C:\WINDOWS\system32\drivers\etc\hosts
2019-07-28 16:01 - 2022-07-13 18:04 - 000000446 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
==================== Network ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
DNS Servers: 192.168.68.204
ist aktiviert.
Network Binding:
=============
Ethernet 2: Intel(R) Ethernet Connection (2) I219-LM -> e1d.sys
WLAN: Ugreen WIFI6 Wireless USB NIC -> aicusbwifi.sys
Ethernet 3: SAMSUNG Mobile USB Remote NDIS Network Device -> usb80236.sys
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> ;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Common Files\Adobe\AGL;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files (x86)\Smart Projects\IsoBuster;Y:\PROGRAMME\QTSystem\;C:\Program Files\dotnet\;
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-947909773-2885354443-2675781160-1010\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKLM\...\StartupApproved\StartupFolder: => "CodeMeter Control Center.lnk"
HKLM\...\StartupApproved\StartupFolder: => "StartRLCMS.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Ashampoo Backup PB"
HKLM\...\StartupApproved\Run: => "PrintDisp"
HKLM\...\StartupApproved\Run: => "Ashampoo WinOptimizer Live-Tuner2"
HKLM\...\StartupApproved\Run: => "MacrokeyManager"
HKLM\...\StartupApproved\Run: => "PDF24"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "LogiBolt"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "LogiOptions"
HKLM\...\StartupApproved\Run: => "EPPCCMON"
HKLM\...\StartupApproved\Run: => "Bdagent"
HKLM\...\StartupApproved\Run: => "Ashampoo Backup"
HKLM\...\StartupApproved\Run: => "BraveVpnWireguardService"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "ArcSoft Connection Service"
HKLM\...\StartupApproved\Run32: => "Adobe CCXProcess"
HKLM\...\StartupApproved\Run32: => "Opera Browser Assistant"
HKLM\...\StartupApproved\Run32: => "MailCheck IE Broker"
HKLM\...\StartupApproved\Run32: => "Lightkey Control Center"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\StartupFolder: => "Reallusion Hub.lnk"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\StartupFolder: => "mhelper.lnk"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\StartupFolder: => "SearchEngineOptimizer.lnk"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "QMxNetworkSync"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Amazon Music"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Amazon Music Helper"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000000"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "CloudApp"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000001"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "EPSDNMON"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "LogiBolt"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_6E2C73815817D7E02B41C013F4C55849"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Opera Stable"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneLaunchUpdater"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneLaunch"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneLaunchChromium"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "com.doctolib.pro.desktop"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Opera Air Stable"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{CBF3F5DB-C621-4568-966F-62883472AD88}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\cdVideoJukebox.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> concept/design GmbH)
FirewallRules: [{09DA3DAC-FFA4-43E1-9D2F-E5658635EE77}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\cdVideoJukebox.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> concept/design GmbH)
FirewallRules: [{DF6CB94B-876E-42D4-8EDC-558B319ECC8C}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\AMasterMain.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> FRANZIS GmbH)
FirewallRules: [{A69A7793-ABAC-492C-848E-68D649807F3B}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\AMasterMain.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> FRANZIS GmbH)
FirewallRules: [{D93DDB5A-D20C-42F0-8811-6AD3E2A92B54}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\AMaster.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> FRANZIS Verlag GmbH)
FirewallRules: [{BBD6EF72-0681-4F96-9636-8371017077F0}] => (Allow) C:\Program Files (x86)\FRANZIS\Audio 10\AMaster.exe (Concept/Design, Information, Bild und Datenverarbeitung GmbH -> FRANZIS Verlag GmbH)
FirewallRules: [UDP Query User{FFF36456-D06A-48D6-8267-C4D634C1047E}C:\program files\presonus\studio one 4\studio one.exe] => (Allow) C:\program files\presonus\studio one 4\studio one.exe (PreSonus) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{AC056B47-7D4F-420A-9DC2-7BEDFC5437DE}C:\program files\presonus\studio one 4\studio one.exe] => (Allow) C:\program files\presonus\studio one 4\studio one.exe (PreSonus) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{577F997A-40EC-4A20-9385-F690FE09890A}C:\program files\presonus\studio one 4\studio one.exe] => (Allow) C:\program files\presonus\studio one 4\studio one.exe (PreSonus) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{3816F851-D0B8-413C-A6D0-1451EB22AA41}C:\program files\presonus\studio one 4\studio one.exe] => (Allow) C:\program files\presonus\studio one 4\studio one.exe (PreSonus) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{82AB3EFC-BC92-47F3-891A-365E613F4E16}C:\users\horst\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\horst\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{B1C44072-1889-4C14-B73F-154365A5F566}C:\users\horst\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\horst\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{A2F28DC8-BEE4-41AF-B973-8C38283525CD}C:\users\horst\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\horst\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{594DDDCA-D253-4D1F-A983-FED18A7F0998}C:\users\horst\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\horst\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2933A59D-BE09-4E6D-B287-20A5B4B0D617}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe (Seiko Epson Corporation) [Datei ist nicht signiert]
FirewallRules: [{47F42FA9-2AE2-45CF-89BA-52A82A2F1F6C}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe (Seiko Epson Corporation) [Datei ist nicht signiert]
FirewallRules: [{B83426C5-573C-4E4E-BF45-83B1E070A7FC}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FirewallRules: [{245F42AB-CAB6-4998-B20B-85D01799D177}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
FirewallRules: [{589FABB2-C469-4BA8-BC19-DEAB760E1843}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{37AB8189-FD24-4E63-B90B-684FE3670CA9}] => (Allow) LPort=31931
FirewallRules: [{FDCE0BC9-8514-417D-B704-B55AA2C4F668}] => (Allow) LPort=14714
FirewallRules: [{ADF12E9F-DFD5-4417-9D93-A5C81A3BD473}] => (Allow) LPort=12972
FirewallRules: [{6C290D82-D8A0-490C-B520-3D6152C8F702}] => (Allow) C:\Program Files (x86)\Music Recorder\Music Recorder 2016\Audials.exe (Audials AG -> Audials AG)
FirewallRules: [{8C763991-FC71-401C-835B-36770642759A}] => (Allow) LPort=53
FirewallRules: [{540DF1F0-A11D-402E-903D-427DB0B0A088}] => (Allow) LPort=53
FirewallRules: [{CA06D59F-1D64-4F1A-962F-99FE5F043266}] => (Allow) LPort=1542
FirewallRules: [{9707B72F-000D-455A-9664-4446FE315CEF}] => (Allow) LPort=1542
FirewallRules: [{1415630C-F8A8-4463-BC4C-44288E11E5EB}] => (Allow) C:\Program Files (x86)\Apowersoft\Beecut\BeeCut.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{14834C08-FFCD-4AC3-BA2F-47D165CE221D}] => (Allow) C:\Program Files (x86)\Apowersoft\Beecut\BeeCut.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{321DE7B7-E30C-43C0-BCB8-B7F927B77903}] => (Allow) C:\Program Files (x86)\Nero\Nero 2017\Nero BackItup\NBService.exe (Nero AG -> Nero AG)
FirewallRules: [{9E138320-5C87-45FD-9E5E-3CB09E47E28B}] => (Allow) C:\Program Files (x86)\Nero\Nero 2017\Nero BackItup\BackItUp.exe (Nero AG -> Nero AG)
FirewallRules: [TCP Query User{DE10AFAE-0CFA-49E8-BC52-3D421AC3A7D2}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{5D95BC7B-479A-4B06-B842-C3B63CFD55CE}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{2B4797CF-185B-479C-986F-4F983986460D}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{8EE2B736-BC18-458F-B158-85D74EE4E96D}C:\program files\logioptionsplus\logioptionsplus_agent.exe] => (Allow) C:\program files\logioptionsplus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{401CA946-3340-4715-B5AB-0F0887BBB13F}C:\program files\logioptionsplus\logioptionsplus_agent.exe] => (Allow) C:\program files\logioptionsplus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{47167B7B-EDA1-4416-AEBB-51A9C7FE14F6}C:\program files\logioptionsplus\logioptionsplus_agent.exe] => (Block) C:\program files\logioptionsplus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{9C82208F-0D77-4482-82C9-592B1A84FB9D}C:\program files\logioptionsplus\logioptionsplus_agent.exe] => (Block) C:\program files\logioptionsplus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{55E42E98-8ED2-4020-984F-5CE048D1B6BE}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{209FC917-FE9B-458A-A9EB-825F1F137EE8}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{1CC73C07-0143-449E-B92E-13778694A894}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{5D1275F0-AAB5-44A4-BEFA-46DEBFE02E25}] => (Allow) C:\Program Files\Audials\AudialsOneEdition 2024\Audials.exe => Keine Datei
FirewallRules: [{5CCB13C4-878C-4DC1-9869-8DF0E25E17F8}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{15B83743-99F3-4248-807A-1E6F66345B5F}] => (Allow) C:\Program Files\Common Files\MAGIX Services\Update Notifier\QMxNetworkSync.exe (MAGIX Software GmbH -> MAGIX)
FirewallRules: [{0F13DFB0-4324-4FCC-8B24-DCBDFF8132EE}] => (Allow) C:\Program Files\Audials\VisionEdition 2024\Audials.exe => Keine Datei
FirewallRules: [{07846DBD-3197-4CC2-B6C3-7E11FF473276}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3D7E19DD-C6CA-46F7-885D-D912A6B16E21}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A0A6B281-127B-4DE4-B767-16E65C3CB79B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E3FFD9D4-00B1-4EE3-84DF-BBF00E55D094}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.126.3208.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BABBECB0-D86C-479C-A141-0CBB31C1F8F0}] => (Allow) C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe (Franz Josef Wechselberger -> F.J. Wechselberger)
FirewallRules: [TCP Query User{DBD1B99C-102F-45E4-990E-569CB1915F62}C:\program files\windowsapps\xbmcfoundation.kodi_21.1.500.0_x64__4n2hpmxwrvr6p\kodi.exe] => (Allow) C:\program files\windowsapps\xbmcfoundation.kodi_21.1.500.0_x64__4n2hpmxwrvr6p\kodi.exe => Keine Datei
FirewallRules: [UDP Query User{3E39EC19-3A86-4AC6-98FC-BB456A4AB0B6}C:\program files\windowsapps\xbmcfoundation.kodi_21.1.500.0_x64__4n2hpmxwrvr6p\kodi.exe] => (Allow) C:\program files\windowsapps\xbmcfoundation.kodi_21.1.500.0_x64__4n2hpmxwrvr6p\kodi.exe => Keine Datei
FirewallRules: [{3EEA9823-9587-4A40-8CF4-ACEADE2BF39B}] => (Allow) C:\Program Files\Audials\VisionEdition 2026\Audials.exe (Audials AG -> Audials AG)
FirewallRules: [TCP Query User{852AC122-13C2-4221-A926-0902A2897EC8}C:\users\horst\appdata\local\programs\opera air\opera.exe] => (Allow) C:\users\horst\appdata\local\programs\opera air\opera.exe => Keine Datei
FirewallRules: [UDP Query User{18E9A897-542F-48EC-B04A-2BC85CCF87E6}C:\users\horst\appdata\local\programs\opera air\opera.exe] => (Allow) C:\users\horst\appdata\local\programs\opera air\opera.exe => Keine Datei
FirewallRules: [TCP Query User{2CECC440-77E1-4E35-AEEC-BA47A7A6AB54}C:\users\horst\appdata\local\programs\opera air\opera.exe] => (Allow) C:\users\horst\appdata\local\programs\opera air\opera.exe => Keine Datei
FirewallRules: [UDP Query User{66CF8B42-6247-4A12-B4F5-B6C23AEC2D6C}C:\users\horst\appdata\local\programs\opera air\opera.exe] => (Allow) C:\users\horst\appdata\local\programs\opera air\opera.exe => Keine Datei
FirewallRules: [{8D314AFD-F087-46EE-9D92-E41A893C8427}] => (Allow) LPort=80
FirewallRules: [{AF95B744-6AC5-49AD-8843-6311FA0DE95D}] => (Allow) LPort=80
FirewallRules: [{E87837D1-A688-4DF0-9407-80D9FB8B3652}] => (Allow) C:\Program Files\Opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{FC667696-6E03-4CA6-8C9E-99C67D2BB7F6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{DD37AE8A-C176-440C-A117-77EB793AE804}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{4F8F8520-650F-4FD0-9AC0-4F1FE315EB9F}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{EDD6E01F-A986-40D2-928F-3F4EE384CEA6}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{AE81007D-B32E-49F1-8282-5B43924547A9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{5B78A22D-6D3E-46E4-AECD-D0CE4B81F74B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{7F6F4EEC-09A8-46FB-9E97-7AFB4A20F629}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{509DA566-F538-4D20-B4A0-421A2EEDAB81}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
FirewallRules: [{990AE47E-2933-4D5E-8CDE-A1579F1F1E47}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Wiederherstellungspunkte =========================
02-01-2026 16:12:55 Geplanter Prüfpunkt
05-01-2026 21:36:10 AdwCleaner_BeforeCleaning_05/01/2026_21:36:07
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (01/05/2026 10:13:48 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-7PAH99J$ über https://IFX-KeyId-d8a3f556085a68c8aa5d5fe079bcc6e9c6d37764.microsoftaik.azure.net/templates/Aik/scep:
GetCACaps
Methode: GET(32ms)
Phase: GetCACaps
Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (01/05/2026 10:13:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AicWifiService.exe, Version: 1.0.0.2, Zeitstempel: 0xbd7ad8a6
Name des fehlerhaften Moduls: VCRUNTIME140_CLR0400.dll, Version: 14.32.31326.0, Zeitstempel: 0xbfc4c5aa
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000001470
ID des fehlerhaften Prozesses: 0xcb0
Startzeit der fehlerhaften Anwendung: 0x01dc7e88292a3ecc
Pfad der fehlerhaften Anwendung: C:\Program Files\Ugreen\AicWifiService.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\VCRUNTIME140_CLR0400.dll
Berichtskennung: 00e0d25b-418a-4eb5-859b-cfa1e4bd9e50
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (01/05/2026 10:13:40 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: AicWifiService.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.AccessViolationException
bei System.Runtime.InteropServices.Marshal.PtrToStructureHelper(IntPtr, System.Object, Boolean)
bei System.Runtime.InteropServices.Marshal.PtrToStructure(IntPtr, System.Type)
bei TestService.AicWifiService.ServiceControlHandler(Int32, Int32, IntPtr, IntPtr)
bei System.ServiceProcess.NativeMethods.StartServiceCtrlDispatcher(IntPtr)
bei System.ServiceProcess.ServiceBase.Run(System.ServiceProcess.ServiceBase[])
bei TestService.Program.Main()
Error: (01/05/2026 10:05:44 PM) (Source: CertEnroll) (EventID: 87) (User: NT-AUTORITÄT)
Description: Fehler bei der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-7PAH99J$ über https://IFX-KeyId-d8a3f556085a68c8aa5d5fe079bcc6e9c6d37764.microsoftaik.azure.net/templates/Aik/scep:
SubmitDone
Submit(Request): Bad Request
{"Message":"Attestation statement cannot be verified, rejecting request. TPM firmware needs update."}
HTTP/1.1 400 Bad Request
Date: Mon, 05 Jan 2026 21:05:45 GMT
Content-Length: 101
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: a81fff91-8266-4329-9d64-5c8511f6c0c6
Methode: POST(3922ms)
Phase: SubmitDone
Ungültige Anforderung (400). 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
Error: (01/05/2026 08:12:28 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte erneut optimieren auf INTERN 1 (M:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
Error: (01/05/2026 08:12:16 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte erneut optimieren auf EXTERN 0_07.2024_SIKO Foto (Z:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
Error: (01/05/2026 06:44:12 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-7PAH99J$ über https://IFX-KeyId-d8a3f556085a68c8aa5d5fe079bcc6e9c6d37764.microsoftaik.azure.net/templates/Aik/scep:
GetCACaps
Methode: GET(16ms)
Phase: GetCACaps
Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (01/05/2026 06:43:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AicWifiService.exe, Version: 1.0.0.2, Zeitstempel: 0xbd7ad8a6
Name des fehlerhaften Moduls: VCRUNTIME140_CLR0400.dll, Version: 14.32.31326.0, Zeitstempel: 0xbfc4c5aa
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000001470
ID des fehlerhaften Prozesses: 0xf58
Startzeit der fehlerhaften Anwendung: 0x01dc7e6adce48f99
Pfad der fehlerhaften Anwendung: C:\Program Files\Ugreen\AicWifiService.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\VCRUNTIME140_CLR0400.dll
Berichtskennung: 326a21f5-2fbe-490b-ade8-c116f4063dd7
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Systemfehler:
=============
Error: (01/05/2026 10:18:37 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT-AUTORITÄT)
Description: Die Zertifizierungsstelle/Schlüssel für den sicheren Start müssen aktualisiert werden. Diese Gerätesignaturinformationen sind hier enthalten.
DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:F23d;OEMModelNumber:Q170M-D3H;OEMModelBaseBoard:Q170M-D3H-CF;OEMModelSystemFamily:Default string;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;
BucketId: 89f33aecfc29e81c14591c9ed947ae2900580226bb9fcbcffa2e6448b96fe9fd
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Error: (01/05/2026 10:13:42 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: Der Computer wurde nach einem schwerwiegenden Fehler neu gestartet. Der Fehlercode war: 0x0000007e (0xffffffffc0000005, 0xfffff80040747b7a, 0xfffff60e748e9e18, 0xfffff60e748e9650). Ein volles Abbild wurde gespeichert in: C:\WINDOWS\MEMORY.DMP. Berichts-ID: 10742f16-1ac6-46ca-8aac-74067ff89798.
Error: (01/05/2026 10:13:41 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "AicWifiServiceD80" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/05/2026 10:13:38 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "WEPHOSTSVC" wurde mit folgendem Fehler beendet:
Bei der Verarbeitung der Steuerungsanforderung ist ein Ausnahmefehler im Dienst aufgetreten.
Error: (01/05/2026 10:13:38 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "workfolderssvc" ist vom Dienst "WSearch" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
Error: (01/05/2026 10:13:36 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 05.01.2026 um 22:05:04 unerwartet heruntergefahren.
Error: (01/05/2026 10:10:05 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT-AUTORITÄT)
Description: Die Zertifizierungsstelle/Schlüssel für den sicheren Start müssen aktualisiert werden. Diese Gerätesignaturinformationen sind hier enthalten.
DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:F23d;OEMModelNumber:Q170M-D3H;OEMModelBaseBoard:Q170M-D3H-CF;OEMModelSystemFamily:Default string;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;
BucketId: 89f33aecfc29e81c14591c9ed947ae2900580226bb9fcbcffa2e6448b96fe9fd
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Error: (01/05/2026 10:05:05 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "WEPHOSTSVC" wurde mit folgendem Fehler beendet:
Bei der Verarbeitung der Steuerungsanforderung ist ein Ausnahmefehler im Dienst aufgetreten.
Windows Defender:
================
Date: 2026-01-05 20:31:28
Description:
Microsoft Defender Antivirus ςċπ нăş взéй ţôφρēδ ьëθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{68561380-B2D0-42DF-A4AF-94DEA2914EC5}%ń %ţЅ˘ąη Τўρê:%вAntimalware%п %ţćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ ҐεŞòŋ:%ъŔΡ ĉοñηĕċţīōп ґůňďöẃň
Date: 2026-01-05 20:25:30
Description:
Microsoft Defender Antivirus ςċπ нăş взéй ţôφρēδ ьëθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{030B6DB5-D224-40CA-836E-AEB14F3CA9BA}%ń %ţЅ˘ąη Τўρê:%вAntimalware%п %ţćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ ҐεŞòŋ:%ъŔΡ ĉοñηĕċţīōп ґůňďöẃň
Date: 2026-01-05 20:20:28
Description:
Microsoft Defender Antivirus ςċπ нăş взéй ţôφρēδ ьëθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{A3812922-A834-42EE-887D-39982FE68881}%ń %ţЅ˘ąη Τўρê:%вAntimalware%п %ţćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ ҐεŞòŋ:%ъŔΡ ĉοñηĕċţīōп ґůňďöẃň
Date: 2026-01-05 20:14:48
Description:
Microsoft Defender Antivirus ςċπ нăş взéй ţôφρēδ ьëθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{5B5F76F6-2AC1-4B61-B44C-0D7756847090}%ń %ţЅ˘ąη Τўρê:%вAntimalware%п %ţćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ ҐεŞòŋ:%ъŔΡ ĉοñηĕċţīōп ґůňďöẃň
Date: 2026-01-04 10:47:07
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=PUADlManager:Win32/DownloadSponsor&threatid=311978&enterprise=0
Name: PUADlManager:Win32/DownloadSponsor
Schweregrad: Niedrig
Kategorie: Potenziell unerwünschte Software
Pfad: file:_B:\SIK Handy Papa 2024-10-26\EINLADUNGEN - ERREIGNISSE\Downloads\Vollversion_ Adobe InDesign CS2 - CHIP Installer _RbW9v.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: DESKTOP-7PAH99J\Horst
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.443.499.0, AS: 1.443.499.0, NIS: 1.443.499.0
Modulversion: AM: 1.1.25110.1, NIS: 1.1.25110.1
Event[0]:
Date: 2026-01-05 22:04:30
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support".
Security Intelligence-Version: 1.443.503.0;1.443.503.0
Modulversion: 1.1.25110.1
CodeIntegrity:
===============
Date: 2026-01-05 22:16:43
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe) attempted to load \Device\HarddiskVolume6\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Microsoft signing level requirements.
Date: 2026-01-05 22:15:42
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.
==================== Speicherinformationen ===========================
BIOS: American Megatrends Inc. F23d 02/26/2018
Hauptplatine: Gigabyte Technology Co., Ltd. Q170M-D3H-CF
Prozessor: Intel(R) Core(TM) i5-6600 CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 39%
Installierter physikalischer RAM: 16254.36 MB
Verfügbarer physikalischer RAM: 9865.62 MB
Summe virtueller Speicher: 18686.36 MB
Verfügbarer virtueller Speicher: 12682.09 MB
==================== Laufwerke ================================
Drive b: (System 2) (Fixed) (Total:1863.01 GB) (Free:1622.03 GB) (Model: Intenso SSD Sata III) NTFS
Drive c: (Windows 10) (Fixed) (Total:475.55 GB) (Free:13.86 GB) (Model: SAMSUNG MZ7LN512HMJP-00000) NTFS
Drive m: (INTERN 1) (Fixed) (Total:1862.89 GB) (Free:245.71 GB) (Model: TOSHIBA DT01ACA200) NTFS
Drive z: (EXTERN 0_07.2024_SIKO Foto) (Fixed) (Total:3726.01 GB) (Free:1666.71 GB) (Model: ST4000VX016-3CV104) NTFS
\\?\Volume{805e9cde-1aee-4c53-979f-187b074f8ebc}\ (Wiederherstellung) (Fixed) (Total:0.44 GB) (Free:0.42 GB) NTFS
\\?\Volume{c9c68501-a3db-42c9-a724-a85d64a5765c}\ () (Fixed) (Total:0.84 GB) (Free:0.18 GB) NTFS
\\?\Volume{f27c94eb-b936-4157-8d17-76852eb05c9f}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 3726 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 476.9 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 2 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 3 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 34F748A4)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt =======================
|
|
06.01.2026, 11:32
| #8 |
| /// TB-Ausbilder | Win 10 : WLAN-USB-Sticks nicht migriert - WLAN-Verbindung kann kurz etabliert werden, bricht dann wieder ab Servus Jörg, vielen Dank für die neuen Logs. Wir entfernen mit FRST noch einige Reste und verwaiste Einträge sowie temporäre Dateien. Außerdem kontrollieren wir die Systemdateien auf Fehler. Dies kann einige Minuten (>> 15) dauern. Du musst also viel Geduld mitbringen. Anschließend führen wir noch eine Kontrolle mit ESET durch. Dies kann bis zu 3 Stunden dauern, je nachdem wie viele Dateien auf dem System sind. Schritt 1 - Reparatur mit FRST Bitte gedulde dich, sobald du die Reparatur gestartet hast. Je nach Art und Umfang der notwendigen Reparaturen kann dies einige Minuten dauern. Eventuell erhältst du während der Reparatur auch die Information "keine Rückmeldung" von FRST. Das ist normal, du musst nichts weiter tun, nur abwarten. HINWEIS AN ALLE MITLESER: Dieses FRST-Skript ist ausschließlich für diesen Nutzer gedacht und sollte niemals 1:1 für ein anderes System verwendet werden!
Schritt 2 Führe ESET Online Scanner (EOS) gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei. Geändert von M-K-D-B (06.01.2026 um 14:19 Uhr) |
|
Gestern, 20:13
| #9 |
| | Fixlog.txt Guten Abend Matthias, Vielen Dank für Deine weitere Hilfe. Ich habe nun wieder Gelegenheit auf den PC zuzugreifen. Hier die Fixlog.txt: Code:
ATTFilter Entfernungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-11-2025
durchgeführt von Horst (07-01-2026 19:31:22) Run:1
Gestartet von C:\Users\Horst\Desktop\Wartung
Geladene Profile: Horst & _ashbackuppb_
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
Start::
CreateRestorePoint:
CloseProcesses:
C:\Program Files (x86)\Lavasoft
C:\ProgramData\Application Data\Lavasoft
C:\ProgramData\Lavasoft
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
C:\Users\AllUserName\AppData\Local\Lavasoft
C:\Users\AllUserName\AppData\Roaming\Lavasoft
DeleteKey: HKCU\Software\Lavasoft
DeleteKey: HKLM\Software\Wow6432Node\Lavasoft
C:\Program Files (x86)\Common Files\IObit
C:\ProgramData\IObit
C:\Users\AllUserName\AppData\LocalLow\IObit
C:\Users\AllUserName\AppData\Roaming\IObit
DeleteKey: HKLM\Software\Wow6432Node\IOBIT
DeleteKey: HKLM\SOFTWARE\WOW6432NODE\INNOVATIVE SOLUTIONS
DeleteKey: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\INNOVATIVE SOLUTIONS
C:\PROGRAM FILES (X86)\INNOVATIVE SOLUTIONS
C:\USERS\AllUserName\APPDATA\LOCAL\INNOVATIVE SOLUTIONS
C:\USERS\AllUserName\APPDATA\ROAMING\INNOVATIVE SOLUTIONS
AS: Spybot - Search and Destroy (Enabled - Out of date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}
AS: Avira Antivirus (Enabled - Up to date) {33CF8AA2-FA06-4AD4-98AB-332D53DD7FFB}
CMD: reg query "HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AM VLC Plus Player Updater" /S
DeleteKey: HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AM VLC Plus Player Updater
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\ChromeHTML: -> <==== ACHTUNG
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> "C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> "C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{7B8A4895-8074-9EBA-2B64-0C2FC00AEDCE}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{AB9B6851-C94E-43B7-A304-F40DEA3FA09F}\localserver32 -> "c:\program files\musehub\current\musehub.exe" ----AppNotificationActivated: => Keine Datei
CustomCLSID: HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{ACEA8D04-E06D-805A-1F4B-6A46CE1EB7EE}\InprocServer32 -> kein Dateipfad
ContextMenuHandlers1: [MVDShlext] -> {027B567F-6B25-42C1-9C0B-5CE8E04024BD} => -> Keine Datei
ContextMenuHandlers4: [MGFolderIconBasicShellEx] -> {6b3c2037-775b-3a6e-9773-0bfcc92d8947} => G:\Program Files\MSTechFolderIconBasicShellEx.DLL -> Keine Datei
ContextMenuHandlers4: [MVDShlext] -> {027B567F-6B25-42C1-9C0B-5CE8E04024BD} => -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
AlternateDataStreams: C:\LOOXIS:{4A003100-7400-7300-4200-740077005100} [704]
AlternateDataStreams: C:\LOOXIS:{61004700-7900-7600-6E00-630043005400} [236]
AlternateDataStreams: C:\LOOXIS:{6E005900-4D00-2B00-4F00-4D0078006900} [704]
AlternateDataStreams: C:\ProgramData:NetOptimizer [294]
AlternateDataStreams: C:\Windows:CM_4536bcf519c7a8c697b63cf41dd9239b7eb9593ecc22faca240a5b6a64c20234 [74]
AlternateDataStreams: C:\Windows:CM_a751d84a57a0954e38fd5e625c6d6d4047d58bde2aeb7d4a85f5a8d2724b91d4 [74]
AlternateDataStreams: C:\Users\All Users:NetOptimizer [294]
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NetOptimizer [294]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:3241321C [131]
AlternateDataStreams: C:\ProgramData\TEMP:810B9F0D [130]
AlternateDataStreams: C:\ProgramData\TEMP:B56E7461 [302]
AlternateDataStreams: C:\ProgramData\TEMP:DFB59A96 [122]
AlternateDataStreams: C:\Users\AllUserName\Documents\Apache_OpenOffice_V4.1.15.exe:BDU [0]
AlternateDataStreams: C:\Users\AllUserName\Documents\ashampoo_backup_2023_38725.exe:BDU [0]
AlternateDataStreams: C:\Users\AllUserName\Documents\ChromeSetup.exe:BDU [0]
AlternateDataStreams: C:\Users\AllUserName\Documents\OperaSetup (1).exe:BDU [0]
AlternateDataStreams: C:\Users\AllUserName\Documents\Opera_111.0.5168.43_Setup_x64.exe:BDU [0]
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {31BD138B-6AC5-484C-96F4-3E49E2D78DFC} URL = hxxps://go.gmx.net/br/ie_search_shopping/splugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {5083A602-2A2F-48B6-9E01-A949E74DF6BB} URL = hxxps://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {7B0DE5C9-898F-45E0-8C19-FECF88DC9136} URL = hxxps://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {8DE2F24E-0A2C-40B6-90C7-E11B772EF774} URL = hxxps://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-947909773-2885354443-2675781160-1001 -> {D8D808CB-8DD2-4649-906F-5F44064DAE80} URL = hxxps://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
Toolbar: HKLM - Kein Name - {C424171E-592A-415a-9EB1-DFD6D95D3530} - Keine Datei
Toolbar: HKLM-x32 - Kein Name - {C424171E-592A-415a-9EB1-DFD6D95D3530} - Keine Datei
HKLM\...\StartupApproved\StartupFolder: => "CodeMeter Control Center.lnk"
HKLM\...\StartupApproved\StartupFolder: => "StartRLCMS.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Ashampoo Backup PB"
HKLM\...\StartupApproved\Run: => "PrintDisp"
HKLM\...\StartupApproved\Run: => "Ashampoo WinOptimizer Live-Tuner2"
HKLM\...\StartupApproved\Run: => "MacrokeyManager"
HKLM\...\StartupApproved\Run: => "PDF24"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "LogiBolt"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "LogiOptions"
HKLM\...\StartupApproved\Run: => "EPPCCMON"
HKLM\...\StartupApproved\Run: => "Bdagent"
HKLM\...\StartupApproved\Run: => "Ashampoo Backup"
HKLM\...\StartupApproved\Run: => "BraveVpnWireguardService"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "ArcSoft Connection Service"
HKLM\...\StartupApproved\Run32: => "Adobe CCXProcess"
HKLM\...\StartupApproved\Run32: => "Opera Browser Assistant"
HKLM\...\StartupApproved\Run32: => "MailCheck IE Broker"
HKLM\...\StartupApproved\Run32: => "Lightkey Control Center"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\StartupFolder: => "Reallusion Hub.lnk"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\StartupFolder: => "mhelper.lnk"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\StartupFolder: => "SearchEngineOptimizer.lnk"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "QMxNetworkSync"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Amazon Music"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Amazon Music Helper"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000000"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "CloudApp"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000001"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "EPSDNMON"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "LogiBolt"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_6E2C73815817D7E02B41C013F4C55849"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Opera Stable"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneLaunchUpdater"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneLaunch"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "OneLaunchChromium"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "com.doctolib.pro.desktop"
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\...\StartupApproved\Run: => "Opera Air Stable"
C:\Program Files (x86)\Spybot - Search & Destroy 2
StartPowershell:
Set-MpPreference -DisableAutoExclusions $true -Force
Set-MpPreference -Mapsreporting basic -Force
Set-MpPreference -DisableRealtimeMonitoring $false -Force
Set-MpPreference -DisablePrivacyMode $true -Force
Set-MpPreference -DisableIOAVProtection $false -Force
Set-MpPreference -UILockdown 0
Set-MpPreference -ScanPurgeItemsAfterDelay 1
Set-MpPreference -CheckForSignaturesBeforeRunningScan $true -Force
Set-MpPreference -PUAProtection enabled -Force
Update-MpSignature
Get-MpComputerStatus
Get-MpPreference
EndPowerShell:
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh winhttp reset proxy
CMD: Bitsadmin /Reset /Allusers
CMD: Winmgmt /salvagerepository
CMD: Winmgmt /verifyrepository
CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R
CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R
CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R
CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R
CMD: reg query "HKCU\Software"
CMD: reg query "HKLM\Software" /reg:32
CMD: reg query "HKLM\Software" /reg:64
CMD: sfc /scannow
Hosts:
RemoveProxy:
EmptyEventLogs:
DeleteQuarantine:
EmptyTemp:
End::
*****************
CreateRestorePoint: Fehler(1=3%) -> Erstellen eines Wiederherstellungspunktes gescheitert.
Prozesse erfolgreich geschlossen.
"C:\Program Files (x86)\Lavasoft" Ordner verschieben:
C:\Program Files (x86)\Lavasoft => erfolgreich verschoben
"C:\ProgramData\Application Data\Lavasoft" => nicht gefunden
"C:\ProgramData\Lavasoft" => nicht gefunden
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft" => nicht gefunden
"C:\Users\ProgramData\AppData\Local\Lavasoft" => nicht gefunden
"C:\Users\Default\AppData\Local\Lavasoft" => nicht gefunden
"C:\Users\Horst\AppData\Local\Lavasoft" Ordner verschieben:
C:\Users\Horst\AppData\Local\Lavasoft => erfolgreich verschoben
"C:\Users\Public\AppData\Local\Lavasoft" => nicht gefunden
"C:\Users\_ashbackuppb_\AppData\Local\Lavasoft" => nicht gefunden
"C:\Users\_ashbackuppb_.DESKTOP-7PAH99J.000\AppData\Local\Lavasoft" => nicht gefunden
"C:\Users\ProgramData\AppData\Roaming\Lavasoft" => nicht gefunden
"C:\Users\Default\AppData\Roaming\Lavasoft" => nicht gefunden
"C:\Users\Horst\AppData\Roaming\Lavasoft" Ordner verschieben:
C:\Users\Horst\AppData\Roaming\Lavasoft => erfolgreich verschoben
"C:\Users\Public\AppData\Roaming\Lavasoft" => nicht gefunden
"C:\Users\_ashbackuppb_\AppData\Roaming\Lavasoft" => nicht gefunden
"C:\Users\_ashbackuppb_.DESKTOP-7PAH99J.000\AppData\Roaming\Lavasoft" => nicht gefunden
HKCU\Software\Lavasoft => nicht gefunden
HKLM\Software\Wow6432Node\Lavasoft => nicht gefunden
"C:\Program Files (x86)\Common Files\IObit" Ordner verschieben:
C:\Program Files (x86)\Common Files\IObit => erfolgreich verschoben
"C:\ProgramData\IObit" Ordner verschieben:
C:\ProgramData\IObit => erfolgreich verschoben
"C:\Users\ProgramData\AppData\LocalLow\IObit" => nicht gefunden
"C:\Users\Default\AppData\LocalLow\IObit" => nicht gefunden
"C:\Users\Horst\AppData\LocalLow\IObit" Ordner verschieben:
C:\Users\Horst\AppData\LocalLow\IObit => erfolgreich verschoben
"C:\Users\Public\AppData\LocalLow\IObit" => nicht gefunden
"C:\Users\_ashbackuppb_\AppData\LocalLow\IObit" => nicht gefunden
"C:\Users\_ashbackuppb_.DESKTOP-7PAH99J.000\AppData\LocalLow\IObit" => nicht gefunden
"C:\Users\ProgramData\AppData\Roaming\IObit" => nicht gefunden
"C:\Users\Default\AppData\Roaming\IObit" => nicht gefunden
"C:\Users\Horst\AppData\Roaming\IObit" Ordner verschieben:
C:\Users\Horst\AppData\Roaming\IObit => erfolgreich verschoben
"C:\Users\Public\AppData\Roaming\IObit" => nicht gefunden
"C:\Users\_ashbackuppb_\AppData\Roaming\IObit" => nicht gefunden
"C:\Users\_ashbackuppb_.DESKTOP-7PAH99J.000\AppData\Roaming\IObit" => nicht gefunden
HKLM\Software\Wow6432Node\IOBIT => erfolgreich entfernt
HKLM\SOFTWARE\WOW6432NODE\INNOVATIVE SOLUTIONS => erfolgreich entfernt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\INNOVATIVE SOLUTIONS => erfolgreich entfernt
"C:\PROGRAM FILES (X86)\INNOVATIVE SOLUTIONS" Ordner verschieben:
C:\PROGRAM FILES (X86)\INNOVATIVE SOLUTIONS => erfolgreich verschoben
"C:\USERS\ProgramData\APPDATA\LOCAL\INNOVATIVE SOLUTIONS" => nicht gefunden
"C:\USERS\Default\APPDATA\LOCAL\INNOVATIVE SOLUTIONS" => nicht gefunden
"C:\USERS\Horst\APPDATA\LOCAL\INNOVATIVE SOLUTIONS" Ordner verschieben:
C:\USERS\Horst\APPDATA\LOCAL\INNOVATIVE SOLUTIONS => erfolgreich verschoben
"C:\USERS\Public\APPDATA\LOCAL\INNOVATIVE SOLUTIONS" => nicht gefunden
"C:\USERS\_ashbackuppb_\APPDATA\LOCAL\INNOVATIVE SOLUTIONS" => nicht gefunden
"C:\USERS\_ashbackuppb_.DESKTOP-7PAH99J.000\APPDATA\LOCAL\INNOVATIVE SOLUTIONS" => nicht gefunden
"C:\USERS\ProgramData\APPDATA\ROAMING\INNOVATIVE SOLUTIONS" => nicht gefunden
"C:\USERS\Default\APPDATA\ROAMING\INNOVATIVE SOLUTIONS" => nicht gefunden
"C:\USERS\Horst\APPDATA\ROAMING\INNOVATIVE SOLUTIONS" Ordner verschieben:
C:\USERS\Horst\APPDATA\ROAMING\INNOVATIVE SOLUTIONS => erfolgreich verschoben
"C:\USERS\Public\APPDATA\ROAMING\INNOVATIVE SOLUTIONS" => nicht gefunden
"C:\USERS\_ashbackuppb_\APPDATA\ROAMING\INNOVATIVE SOLUTIONS" => nicht gefunden
"C:\USERS\_ashbackuppb_.DESKTOP-7PAH99J.000\APPDATA\ROAMING\INNOVATIVE SOLUTIONS" => nicht gefunden
"AS: Spybot - Search and Destroy (Enabled - Out of date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}" => erfolgreich entfernt
"AS: Avira Antivirus (Enabled - Up to date) {33CF8AA2-FA06-4AD4-98AB-332D53DD7FFB}" => erfolgreich entfernt
========= reg query "HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AM VLC Plus Player Updater" /S =========
HKEY_USERS\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AM VLC Plus Player Updater
DisplayName REG_SZ VLC Plus Player Updater
UninstallString REG_SZ "C:\Users\Horst\AppData\Local\VLC Plus Player Updater\uninst.exe"
DisplayIcon REG_SZ C:\Users\Horst\AppData\Local\VLC Plus Player Updater\uninst.exe
DisplayVersion REG_SZ 1.0.2
========= Ende von CMD: =========
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AM VLC Plus Player Updater => erfolgreich entfernt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\ChromeHTML => erfolgreich entfernt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000} => erfolgreich entfernt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000} => erfolgreich entfernt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{7B8A4895-8074-9EBA-2B64-0C2FC00AEDCE} => erfolgreich entfernt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{AB9B6851-C94E-43B7-A304-F40DEA3FA09F} => erfolgreich entfernt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001_Classes\CLSID\{ACEA8D04-E06D-805A-1F4B-6A46CE1EB7EE} => erfolgreich entfernt
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\MVDShlext => erfolgreich entfernt
HKLM\Software\Classes\CLSID\{027B567F-6B25-42C1-9C0B-5CE8E04024BD} => erfolgreich entfernt
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\MGFolderIconBasicShellEx => erfolgreich entfernt
HKLM\Software\Classes\CLSID\{6b3c2037-775b-3a6e-9773-0bfcc92d8947} => erfolgreich entfernt
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\MVDShlext => erfolgreich entfernt
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => erfolgreich entfernt
C:\LOOXIS => ":{4A003100-7400-7300-4200-740077005100}" ADS erfolgreich entfernt
C:\LOOXIS => ":{61004700-7900-7600-6E00-630043005400}" ADS erfolgreich entfernt
C:\LOOXIS => ":{6E005900-4D00-2B00-4F00-4D0078006900}" ADS erfolgreich entfernt
C:\ProgramData => ":NetOptimizer" ADS erfolgreich entfernt
C:\Windows => ":CM_4536bcf519c7a8c697b63cf41dd9239b7eb9593ecc22faca240a5b6a64c20234" ADS erfolgreich entfernt
C:\Windows => ":CM_a751d84a57a0954e38fd5e625c6d6d4047d58bde2aeb7d4a85f5a8d2724b91d4" ADS erfolgreich entfernt
"C:\Users\All Users" => ":NetOptimizer" ADS nicht gefunden.
"C:\ProgramData\Anwendungsdaten" => ":NetOptimizer" ADS nicht gefunden.
C:\ProgramData\Reprise => ":wupeogjxldtlfudivq`qsp`26hfm" ADS erfolgreich entfernt
C:\ProgramData\TEMP => ":3241321C" ADS erfolgreich entfernt
C:\ProgramData\TEMP => ":810B9F0D" ADS erfolgreich entfernt
C:\ProgramData\TEMP => ":B56E7461" ADS erfolgreich entfernt
C:\ProgramData\TEMP => ":DFB59A96" ADS erfolgreich entfernt
"C:\Users\ProgramData\Documents\Apache_OpenOffice_V4.1.15.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\Default\Documents\Apache_OpenOffice_V4.1.15.exe" => ":BDU" ADS nicht gefunden.
C:\Users\Horst\Documents\Apache_OpenOffice_V4.1.15.exe => ":BDU" ADS erfolgreich entfernt
"C:\Users\Public\Documents\Apache_OpenOffice_V4.1.15.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\_ashbackuppb_\Documents\Apache_OpenOffice_V4.1.15.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\_ashbackuppb_.DESKTOP-7PAH99J.000\Documents\Apache_OpenOffice_V4.1.15.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\ProgramData\Documents\ashampoo_backup_2023_38725.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\Default\Documents\ashampoo_backup_2023_38725.exe" => ":BDU" ADS nicht gefunden.
C:\Users\Horst\Documents\ashampoo_backup_2023_38725.exe => ":BDU" ADS erfolgreich entfernt
"C:\Users\Public\Documents\ashampoo_backup_2023_38725.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\_ashbackuppb_\Documents\ashampoo_backup_2023_38725.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\_ashbackuppb_.DESKTOP-7PAH99J.000\Documents\ashampoo_backup_2023_38725.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\ProgramData\Documents\ChromeSetup.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\Default\Documents\ChromeSetup.exe" => ":BDU" ADS nicht gefunden.
C:\Users\Horst\Documents\ChromeSetup.exe => ":BDU" ADS erfolgreich entfernt
"C:\Users\Public\Documents\ChromeSetup.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\_ashbackuppb_\Documents\ChromeSetup.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\_ashbackuppb_.DESKTOP-7PAH99J.000\Documents\ChromeSetup.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\ProgramData\Documents\OperaSetup (1).exe" => ":BDU" ADS nicht gefunden.
"C:\Users\Default\Documents\OperaSetup (1).exe" => ":BDU" ADS nicht gefunden.
C:\Users\Horst\Documents\OperaSetup (1).exe => ":BDU" ADS erfolgreich entfernt
"C:\Users\Public\Documents\OperaSetup (1).exe" => ":BDU" ADS nicht gefunden.
"C:\Users\_ashbackuppb_\Documents\OperaSetup (1).exe" => ":BDU" ADS nicht gefunden.
"C:\Users\_ashbackuppb_.DESKTOP-7PAH99J.000\Documents\OperaSetup (1).exe" => ":BDU" ADS nicht gefunden.
"C:\Users\ProgramData\Documents\Opera_111.0.5168.43_Setup_x64.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\Default\Documents\Opera_111.0.5168.43_Setup_x64.exe" => ":BDU" ADS nicht gefunden.
C:\Users\Horst\Documents\Opera_111.0.5168.43_Setup_x64.exe => ":BDU" ADS erfolgreich entfernt
"C:\Users\Public\Documents\Opera_111.0.5168.43_Setup_x64.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\_ashbackuppb_\Documents\Opera_111.0.5168.43_Setup_x64.exe" => ":BDU" ADS nicht gefunden.
"C:\Users\_ashbackuppb_.DESKTOP-7PAH99J.000\Documents\Opera_111.0.5168.43_Setup_x64.exe" => ":BDU" ADS nicht gefunden.
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157" => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157" => Wert erfolgreich wiederhergestellt
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157" => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157" => Wert erfolgreich wiederhergestellt
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" => Wert erfolgreich wiederhergestellt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{31BD138B-6AC5-484C-96F4-3E49E2D78DFC} => erfolgreich entfernt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5083A602-2A2F-48B6-9E01-A949E74DF6BB} => erfolgreich entfernt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7B0DE5C9-898F-45E0-8C19-FECF88DC9136} => erfolgreich entfernt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8DE2F24E-0A2C-40B6-90C7-E11B772EF774} => erfolgreich entfernt
HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D8D808CB-8DD2-4649-906F-5F44064DAE80} => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{C424171E-592A-415a-9EB1-DFD6D95D3530}" => erfolgreich entfernt
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{C424171E-592A-415a-9EB1-DFD6D95D3530}" => erfolgreich entfernt
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk" => nicht gefunden
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder\\CodeMeter Control Center.lnk" => erfolgreich entfernt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\StartRLCMS.lnk => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder\\StartRLCMS.lnk" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\SecurityHealth" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\SecurityHealth" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\AdobeGCInvoker-1.0" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\AdobeGCInvoker-1.0" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\AdobeAAMUpdater-1.0" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Ashampoo Backup PB" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Ashampoo Backup PB" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\PrintDisp" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\PrintDisp" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Ashampoo WinOptimizer Live-Tuner2" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Ashampoo WinOptimizer Live-Tuner2" => nicht gefunden
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\MacrokeyManager" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\MacrokeyManager" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\PDF24" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\PDF24" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Logitech Download Assistant" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Logitech Download Assistant" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\LogiBolt" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\LogiBolt" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\RTHDVCPL" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\RTHDVCPL" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\LogiOptions" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\LogiOptions" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\EPPCCMON" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\EPPCCMON" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Bdagent" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Bdagent" => nicht gefunden
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Ashampoo Backup" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Ashampoo Backup" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\BraveVpnWireguardService" => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\BraveVpnWireguardService" => nicht gefunden
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\Adobe Creative Cloud" => erfolgreich entfernt
"HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe Creative Cloud" => nicht gefunden
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\AdobeCS6ServiceManager" => erfolgreich entfernt
"HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager" => nicht gefunden
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\ArcSoft Connection Service" => erfolgreich entfernt
"HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ArcSoft Connection Service" => nicht gefunden
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\Adobe CCXProcess" => erfolgreich entfernt
"HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe CCXProcess" => nicht gefunden
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\Opera Browser Assistant" => erfolgreich entfernt
"HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Opera Browser Assistant" => nicht gefunden
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\MailCheck IE Broker" => erfolgreich entfernt
"HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\MailCheck IE Broker" => nicht gefunden
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\Lightkey Control Center" => erfolgreich entfernt
"HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Lightkey Control Center" => nicht gefunden
"C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Reallusion Hub.lnk" => nicht gefunden
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder\\Reallusion Hub.lnk" => erfolgreich entfernt
"C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mhelper.lnk" => nicht gefunden
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder\\mhelper.lnk" => erfolgreich entfernt
"C:\Users\Horst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SearchEngineOptimizer.lnk" => nicht gefunden
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder\\SearchEngineOptimizer.lnk" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\OneDrive" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\OneDrive" => nicht gefunden
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\QMxNetworkSync" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\QMxNetworkSync" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Amazon Music" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Amazon Music" => nicht gefunden
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Amazon Music Helper" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Amazon Music Helper" => nicht gefunden
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\EPLTarget\P0000000000000000" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\EPLTarget\P0000000000000000" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Spotify" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Spotify" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\CCleaner Smart Cleaning" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\CCleaner Smart Cleaning" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\CloudApp" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\CloudApp" => nicht gefunden
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\EPLTarget\P0000000000000001" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\EPLTarget\P0000000000000001" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\EPSDNMON" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\EPSDNMON" => nicht gefunden
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\LogiBolt" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\LogiBolt" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\MicrosoftEdgeAutoLaunch_6E2C73815817D7E02B41C013F4C55849" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\MicrosoftEdgeAutoLaunch_6E2C73815817D7E02B41C013F4C55849" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Opera Stable" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Opera Stable" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\OneLaunchUpdater" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\OneLaunchUpdater" => nicht gefunden
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\OneLaunch" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\OneLaunch" => nicht gefunden
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\OneLaunchChromium" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\OneLaunchChromium" => nicht gefunden
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\com.doctolib.pro.desktop" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\com.doctolib.pro.desktop" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Opera Air Stable" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Opera Air Stable" => nicht gefunden
"C:\Program Files (x86)\Spybot - Search & Destroy 2" Ordner verschieben:
C:\Program Files (x86)\Spybot - Search & Destroy 2 => erfolgreich verschoben
========= Powershell: =========
AMEngineVersion : 0.0.0.0
AMProductVersion : 4.18.25110.6
AMRunningMode : Not running
AMServiceEnabled : False
AMServiceVersion : 0.0.0.0
AntispywareEnabled : False
AntispywareSignatureAge : 0
AntispywareSignatureLastUpdated :
AntispywareSignatureVersion :
AntivirusEnabled : False
AntivirusSignatureAge : 65535
AntivirusSignatureLastUpdated :
AntivirusSignatureVersion :
BehaviorMonitorEnabled : False
ComputerID : E87CD2AD-CF6F-DB4A-EC89-7FCE88D83B4F
ComputerState : 0
DefenderSignaturesOutOfDate : False
DeviceControlDefaultEnforcement : Unknown
DeviceControlPoliciesLastUpdated : 01.01.1601 01:00:00
DeviceControlState : Unknown
FullScanAge : 4294967295
FullScanEndTime :
FullScanOverdue : False
FullScanRequired : False
FullScanSignatureVersion :
FullScanStartTime :
InitializationProgress : ServiceStartedSuccessfully
IoavProtectionEnabled : False
IsTamperProtected : False
IsVirtualMachine : False
LastFullScanSource : 0
LastQuickScanSource : 0
NISEnabled : False
NISEngineVersion : 0.0.0.0
NISSignatureAge : 65535
NISSignatureLastUpdated :
NISSignatureVersion :
OnAccessProtectionEnabled : False
ProductStatus : 1
QuickScanAge : 4294967295
QuickScanEndTime :
QuickScanOverdue : False
QuickScanSignatureVersion :
QuickScanStartTime :
RealTimeProtectionEnabled : False
RealTimeScanDirection : 0
RebootRequired : False
SmartAppControlExpiration :
SmartAppControlState :
TamperProtectionSource : Signatures
TDTCapable : N/A
TDTMode : N/A
TDTSiloType : N/A
TDTStatus : N/A
TDTTelemetry : N/A
TroubleShootingDailyMaxQuota :
TroubleShootingDailyQuotaLeft :
TroubleShootingEndTime :
TroubleShootingExpirationLeft :
TroubleShootingMode :
TroubleShootingModeSource :
TroubleShootingQuotaResetTime :
TroubleShootingStartTime :
PSComputerName :
========= Ende von Powershell: =========
========= netsh winsock reset =========
Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.
========= Ende von CMD: =========
========= netsh advfirewall reset =========
OK.
========= Ende von CMD: =========
========= netsh advfirewall set allprofiles state ON =========
OK.
========= Ende von CMD: =========
========= netsh winhttp reset proxy =========
Aktuelle WinHTTP-Proxyeinstellungen:
DirectAccess (kein Proxyserver).
========= Ende von CMD: =========
========= Bitsadmin /Reset /Allusers =========
BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.
{11E7D4D9-1583-499B-BDCC-5E59A6467506} canceled.
{C1B7F8F6-CE3E-4E2E-9C3E-F41E78D8CDBF} canceled.
{C768D4E7-A5E3-4E0E-BCD2-9F97E0BF63BB} canceled.
Unable to cancel {13BC7868-3143-429D-95B1-9632242F642C}.
{79A57984-EA5E-44F7-B05A-DE0298B72A4D} canceled.
{107095BF-41F6-4593-B8F1-9AD0B0EC4582} canceled.
{BFA14B4A-97A9-473B-B623-632776789670} canceled.
{D00F3ADB-606F-4C9A-BECE-29F66DEE3FE4} canceled.
{6CB0E082-157E-47BC-849D-BB6312871015} canceled.
{73AE4211-4747-47A5-BCF0-6219D53E9C07} canceled.
{D224300B-A338-4A72-9F9D-75FF7E3572DB} canceled.
10 out of 11 jobs canceled.
========= Ende von CMD: =========
========= Winmgmt /salvagerepository =========
Das WMI-Repository ist konsistent.
========= Ende von CMD: =========
========= Winmgmt /verifyrepository =========
Das WMI-Repository ist konsistent.
========= Ende von CMD: =========
========= "%WINDIR%\SYSTEM32\lodctr.exe" /R =========
Info: Die Leistungsindikatoreinstellung konnte erfolgreich aus dem Systemsicherungsspeicher neu erstellt werden.
========= Ende von CMD: =========
========= "%WINDIR%\SysWOW64\lodctr.exe" /R =========
Info: Die Leistungsindikatoreinstellung konnte erfolgreich aus dem Systemsicherungsspeicher neu erstellt werden.
========= Ende von CMD: =========
========= "%WINDIR%\SYSTEM32\lodctr.exe" /R =========
Info: Die Leistungsindikatoreinstellung konnte erfolgreich aus dem Systemsicherungsspeicher neu erstellt werden.
========= Ende von CMD: =========
========= "%WINDIR%\SysWOW64\lodctr.exe" /R =========
Info: Die Leistungsindikatoreinstellung konnte erfolgreich aus dem Systemsicherungsspeicher neu erstellt werden.
========= Ende von CMD: =========
========= reg query "HKCU\Software" =========
HKEY_CURRENT_USER\Software\1&1 Mail & Media GmbH
HKEY_CURRENT_USER\Software\3DYD Soft
HKEY_CURRENT_USER\Software\4kdownload.com
HKEY_CURRENT_USER\Software\7-Zip
HKEY_CURRENT_USER\Software\AAA Logo
HKEY_CURRENT_USER\Software\AbstractCurves
HKEY_CURRENT_USER\Software\Acon Digital
HKEY_CURRENT_USER\Software\Adobe
HKEY_CURRENT_USER\Software\Aiseesoft Studio
HKEY_CURRENT_USER\Software\AKVIS
HKEY_CURRENT_USER\Software\AM
HKEY_CURRENT_USER\Software\Amazon
HKEY_CURRENT_USER\Software\Amazon.com Services LLC
HKEY_CURRENT_USER\Software\Andy
HKEY_CURRENT_USER\Software\Apowersoft
HKEY_CURRENT_USER\Software\AppDataLow
HKEY_CURRENT_USER\Software\Apple Computer, Inc.
HKEY_CURRENT_USER\Software\Apple Inc.
HKEY_CURRENT_USER\Software\Applications
HKEY_CURRENT_USER\Software\ArcSoft
HKEY_CURRENT_USER\Software\ASCOMP
HKEY_CURRENT_USER\Software\Ashampoo
HKEY_CURRENT_USER\Software\ashampoo GmbH & Co. KG
HKEY_CURRENT_USER\Software\ASIO
HKEY_CURRENT_USER\Software\ASProtect
HKEY_CURRENT_USER\Software\Audials
HKEY_CURRENT_USER\Software\Autodesk
HKEY_CURRENT_USER\Software\Avanquest
HKEY_CURRENT_USER\Software\AvastAdSDK
HKEY_CURRENT_USER\Software\AVG
HKEY_CURRENT_USER\Software\Avid
HKEY_CURRENT_USER\Software\Avid Technology
HKEY_CURRENT_USER\Software\Avira
HKEY_CURRENT_USER\Software\AVS4YOU
HKEY_CURRENT_USER\Software\BenVista
HKEY_CURRENT_USER\Software\Blackmagic Design
HKEY_CURRENT_USER\Software\Blender Foundation
HKEY_CURRENT_USER\Software\BlueStacksInstaller
HKEY_CURRENT_USER\Software\BraveSoftware
HKEY_CURRENT_USER\Software\BugSplat
HKEY_CURRENT_USER\Software\Bytescout
HKEY_CURRENT_USER\Software\Cakewalk Music Software
HKEY_CURRENT_USER\Software\Caligari trueSpace7
HKEY_CURRENT_USER\Software\Canon
HKEY_CURRENT_USER\Software\CanonBJ
HKEY_CURRENT_USER\Software\capella-software
HKEY_CURRENT_USER\Software\CDDB
HKEY_CURRENT_USER\Software\Chromium
HKEY_CURRENT_USER\Software\Class
HKEY_CURRENT_USER\Software\Clients
HKEY_CURRENT_USER\Software\Cliqz
HKEY_CURRENT_USER\Software\CloudPlus, Inc.
HKEY_CURRENT_USER\Software\CODIJY
HKEY_CURRENT_USER\Software\ComodoGroup
HKEY_CURRENT_USER\Software\concept/design
HKEY_CURRENT_USER\Software\Corel
HKEY_CURRENT_USER\Software\CyberLink
HKEY_CURRENT_USER\Software\Cygwin
HKEY_CURRENT_USER\Software\Dassault Systemes
HKEY_CURRENT_USER\Software\Datastead
HKEY_CURRENT_USER\Software\DAZ
HKEY_CURRENT_USER\Software\Design Science
HKEY_CURRENT_USER\Software\Digital Photo Software
HKEY_CURRENT_USER\Software\DVDVideoSoft
HKEY_CURRENT_USER\Software\DxO
HKEY_CURRENT_USER\Software\DxOLabs
HKEY_CURRENT_USER\Software\Edge
HKEY_CURRENT_USER\Software\ej-technologies
HKEY_CURRENT_USER\Software\eM Client
HKEY_CURRENT_USER\Software\Engelmann Media
HKEY_CURRENT_USER\Software\EPSON
HKEY_CURRENT_USER\Software\Ericsson
HKEY_CURRENT_USER\Software\EurekaLab
HKEY_CURRENT_USER\Software\Fotor3Session
HKEY_CURRENT_USER\Software\FotoSketcher
HKEY_CURRENT_USER\Software\Foxit Software
HKEY_CURRENT_USER\Software\FreeCAD
HKEY_CURRENT_USER\Software\FreeDownloadManager.ORG
HKEY_CURRENT_USER\Software\Freemake
HKEY_CURRENT_USER\Software\GearMage
HKEY_CURRENT_USER\Software\giveawayoftheday.com
HKEY_CURRENT_USER\Software\Google
HKEY_CURRENT_USER\Software\GPL Ghostscript
HKEY_CURRENT_USER\Software\GreenTree Applications
HKEY_CURRENT_USER\Software\GSettings
HKEY_CURRENT_USER\Software\Helm
HKEY_CURRENT_USER\Software\Hewlett-Packard
HKEY_CURRENT_USER\Software\HippoEDIT
HKEY_CURRENT_USER\Software\hugin
HKEY_CURRENT_USER\Software\ImageMagick
HKEY_CURRENT_USER\Software\Imgdownloader
HKEY_CURRENT_USER\Software\indii.org
HKEY_CURRENT_USER\Software\Informer Technologies, Inc.
HKEY_CURRENT_USER\Software\Intel
HKEY_CURRENT_USER\Software\IObit
HKEY_CURRENT_USER\Software\iTinySoft
HKEY_CURRENT_USER\Software\JavaSoft
HKEY_CURRENT_USER\Software\LibreCAD
HKEY_CURRENT_USER\Software\Licenses
HKEY_CURRENT_USER\Software\LogiShrd
HKEY_CURRENT_USER\Software\Logitech
HKEY_CURRENT_USER\Software\Luminance HDR Development Team
HKEY_CURRENT_USER\Software\Macromedia
HKEY_CURRENT_USER\Software\MAGIX
HKEY_CURRENT_USER\Software\MakeMusic
HKEY_CURRENT_USER\Software\Malwarebytes
HKEY_CURRENT_USER\Software\MatchWare
HKEY_CURRENT_USER\Software\MediaDimo
HKEY_CURRENT_USER\Software\MediaHuman
HKEY_CURRENT_USER\Software\MedienTeam66
HKEY_CURRENT_USER\Software\Meltytech
HKEY_CURRENT_USER\Software\MicroQuill
HKEY_CURRENT_USER\Software\Microsoft
HKEY_CURRENT_USER\Software\Movavi
HKEY_CURRENT_USER\Software\Mozilla
HKEY_CURRENT_USER\Software\MozillaPlugins
HKEY_CURRENT_USER\Software\MPC-HC
HKEY_CURRENT_USER\Software\mpv.net
HKEY_CURRENT_USER\Software\MT66
HKEY_CURRENT_USER\Software\musescore.org
HKEY_CURRENT_USER\Software\MuseScore3
HKEY_CURRENT_USER\Software\MyPhoneExplorer
HKEY_CURRENT_USER\Software\NCH Software
HKEY_CURRENT_USER\Software\NCH Swift Sound
HKEY_CURRENT_USER\Software\Nero
HKEY_CURRENT_USER\Software\Netscape
HKEY_CURRENT_USER\Software\nwjs
HKEY_CURRENT_USER\Software\O&O
HKEY_CURRENT_USER\Software\OCS
HKEY_CURRENT_USER\Software\ODBC
HKEY_CURRENT_USER\Software\OpenOffice
HKEY_CURRENT_USER\Software\Opera Software
HKEY_CURRENT_USER\Software\Paint.NET
HKEY_CURRENT_USER\Software\Panasonic
HKEY_CURRENT_USER\Software\PanoramaStudio
HKEY_CURRENT_USER\Software\PCWinSoft
HKEY_CURRENT_USER\Software\PDF Architect 5
HKEY_CURRENT_USER\Software\PDF24
HKEY_CURRENT_USER\Software\Piriform
HKEY_CURRENT_USER\Software\Plotagon
HKEY_CURRENT_USER\Software\Policies
HKEY_CURRENT_USER\Software\pptcore
HKEY_CURRENT_USER\Software\PreSonus
HKEY_CURRENT_USER\Software\QtProject
HKEY_CURRENT_USER\Software\RapidSolution
HKEY_CURRENT_USER\Software\Reallusion
HKEY_CURRENT_USER\Software\Realtek
HKEY_CURRENT_USER\Software\Redfield
HKEY_CURRENT_USER\Software\RegisteredApplications
HKEY_CURRENT_USER\Software\Safer Networking Limited
HKEY_CURRENT_USER\Software\Seiko Epson Corporation
HKEY_CURRENT_USER\Software\simplitec
HKEY_CURRENT_USER\Software\Skyfiles
HKEY_CURRENT_USER\Software\Smart Projects
HKEY_CURRENT_USER\Software\SpeedyPainter
HKEY_CURRENT_USER\Software\Spotify
HKEY_CURRENT_USER\Software\Stepok
HKEY_CURRENT_USER\Software\The Document Foundation
HKEY_CURRENT_USER\Software\The Silicon Realms Toolworks
HKEY_CURRENT_USER\Software\Thunderbird
HKEY_CURRENT_USER\Software\ThunderSoft
HKEY_CURRENT_USER\Software\Tipard Studio
HKEY_CURRENT_USER\Software\TomTom
HKEY_CURRENT_USER\Software\Tone2
HKEY_CURRENT_USER\Software\Tor Project
HKEY_CURRENT_USER\Software\Tracker Software
HKEY_CURRENT_USER\Software\Trolltech
HKEY_CURRENT_USER\Software\TuneFab Spotify Music Converter
HKEY_CURRENT_USER\Software\U-HE
HKEY_CURRENT_USER\Software\UniPDF
HKEY_CURRENT_USER\Software\unipdf2image
HKEY_CURRENT_USER\Software\Unity
HKEY_CURRENT_USER\Software\VB And VBA Program Settings
HKEY_CURRENT_USER\Software\vertexshare
HKEY_CURRENT_USER\Software\VICABO GmbH
HKEY_CURRENT_USER\Software\Vidmore
HKEY_CURRENT_USER\Software\VS Revo Group
HKEY_CURRENT_USER\Software\WebFoxBrowser
HKEY_CURRENT_USER\Software\Werner Schweer and Others
HKEY_CURRENT_USER\Software\whc
HKEY_CURRENT_USER\Software\WIBU-SYSTEMS
HKEY_CURRENT_USER\Software\WinRAR SFX
HKEY_CURRENT_USER\Software\Wintertree
HKEY_CURRENT_USER\Software\WinZip Computing, S.L.
HKEY_CURRENT_USER\Software\WiseCleaner
HKEY_CURRENT_USER\Software\Wondershare
HKEY_CURRENT_USER\Software\Wow6432Node
HKEY_CURRENT_USER\Software\xiberpix
HKEY_CURRENT_USER\Software\ZONER
HKEY_CURRENT_USER\Software\Classes
========= Ende von CMD: =========
========= reg query "HKLM\Software" /reg:32 =========
HKEY_LOCAL_MACHINE\Software
(Standard) REG_SZ
HKEY_LOCAL_MACHINE\Software\1&1 Mail & Media GmbH
HKEY_LOCAL_MACHINE\Software\1D0EC6DE-4A80-4CC3-A335-E6E41C951198
HKEY_LOCAL_MACHINE\Software\Acon Digital
HKEY_LOCAL_MACHINE\Software\ActMask Virtual Printer SDK
HKEY_LOCAL_MACHINE\Software\Adobe
HKEY_LOCAL_MACHINE\Software\Adobe Systems
HKEY_LOCAL_MACHINE\Software\AKVIS
HKEY_LOCAL_MACHINE\Software\AppDataLow
HKEY_LOCAL_MACHINE\Software\Apple Computer, Inc.
HKEY_LOCAL_MACHINE\Software\Apple Inc.
HKEY_LOCAL_MACHINE\Software\ArcSoft
HKEY_LOCAL_MACHINE\Software\Artifex
HKEY_LOCAL_MACHINE\Software\Ashampoo
HKEY_LOCAL_MACHINE\Software\ASIO
HKEY_LOCAL_MACHINE\Software\Autodesk
HKEY_LOCAL_MACHINE\Software\Avanquest
HKEY_LOCAL_MACHINE\Software\Avast Software
HKEY_LOCAL_MACHINE\Software\Avery Zweckform
HKEY_LOCAL_MACHINE\Software\AVG
HKEY_LOCAL_MACHINE\Software\Avira
HKEY_LOCAL_MACHINE\Software\AVS4YOU
HKEY_LOCAL_MACHINE\Software\B.H.A
HKEY_LOCAL_MACHINE\Software\BCL Technologies
HKEY_LOCAL_MACHINE\Software\BD Inc
HKEY_LOCAL_MACHINE\Software\BenVista
HKEY_LOCAL_MACHINE\Software\Bitdefender Agent
HKEY_LOCAL_MACHINE\Software\BraveSoftware
HKEY_LOCAL_MACHINE\Software\Canon
HKEY_LOCAL_MACHINE\Software\capella-software
HKEY_LOCAL_MACHINE\Software\concept/design
HKEY_LOCAL_MACHINE\Software\Corel
HKEY_LOCAL_MACHINE\Software\CyberLink
HKEY_LOCAL_MACHINE\Software\Cygwin
HKEY_LOCAL_MACHINE\Software\DigitalWave
HKEY_LOCAL_MACHINE\Software\dotnet
HKEY_LOCAL_MACHINE\Software\DVDVideoSoft
HKEY_LOCAL_MACHINE\Software\DxO
HKEY_LOCAL_MACHINE\Software\Engelmann Media
HKEY_LOCAL_MACHINE\Software\EPSON
HKEY_LOCAL_MACHINE\Software\EpsonNet
HKEY_LOCAL_MACHINE\Software\Foxit Software
HKEY_LOCAL_MACHINE\Software\Freemake
HKEY_LOCAL_MACHINE\Software\Google
HKEY_LOCAL_MACHINE\Software\GPL Ghostscript
HKEY_LOCAL_MACHINE\Software\GreenTree Applications
HKEY_LOCAL_MACHINE\Software\GuidGuid13
HKEY_LOCAL_MACHINE\Software\HaaliMkx
HKEY_LOCAL_MACHINE\Software\HD Sentinel
HKEY_LOCAL_MACHINE\Software\Hewlett-Packard
HKEY_LOCAL_MACHINE\Software\indii.org
HKEY_LOCAL_MACHINE\Software\InstallShield
HKEY_LOCAL_MACHINE\Software\Intel
HKEY_LOCAL_MACHINE\Software\IOTransfer
HKEY_LOCAL_MACHINE\Software\ISL
HKEY_LOCAL_MACHINE\Software\iTinySoft
HKEY_LOCAL_MACHINE\Software\JavaSoft
HKEY_LOCAL_MACHINE\Software\JreMetrics
HKEY_LOCAL_MACHINE\Software\Khronos
HKEY_LOCAL_MACHINE\Software\Lame For Audacity
HKEY_LOCAL_MACHINE\Software\Licenses
HKEY_LOCAL_MACHINE\Software\LMMS Developers
HKEY_LOCAL_MACHINE\Software\LOOXIS
HKEY_LOCAL_MACHINE\Software\Macromedia
HKEY_LOCAL_MACHINE\Software\Macrovision
HKEY_LOCAL_MACHINE\Software\MAGIX
HKEY_LOCAL_MACHINE\Software\Malwarebytes
HKEY_LOCAL_MACHINE\Software\Microsoft
HKEY_LOCAL_MACHINE\Software\Microsoft Research
HKEY_LOCAL_MACHINE\Software\Mozilla
HKEY_LOCAL_MACHINE\Software\MozillaPlugins
HKEY_LOCAL_MACHINE\Software\MyPhoneExplorer
HKEY_LOCAL_MACHINE\Software\NCH Software
HKEY_LOCAL_MACHINE\Software\NCH Swift Sound
HKEY_LOCAL_MACHINE\Software\Nero
HKEY_LOCAL_MACHINE\Software\Nevron
HKEY_LOCAL_MACHINE\Software\Norton
HKEY_LOCAL_MACHINE\Software\Nuance
HKEY_LOCAL_MACHINE\Software\Nullsoft
HKEY_LOCAL_MACHINE\Software\O&K Print Router
HKEY_LOCAL_MACHINE\Software\O&K Software
HKEY_LOCAL_MACHINE\Software\ODBC
HKEY_LOCAL_MACHINE\Software\OpenOffice
HKEY_LOCAL_MACHINE\Software\Outbyte
HKEY_LOCAL_MACHINE\Software\Panasonic
HKEY_LOCAL_MACHINE\Software\PCWinSoft
HKEY_LOCAL_MACHINE\Software\PDF Architect 5
HKEY_LOCAL_MACHINE\Software\PDF24
HKEY_LOCAL_MACHINE\Software\Piriform
HKEY_LOCAL_MACHINE\Software\RapidSolution
HKEY_LOCAL_MACHINE\Software\Reallusion
HKEY_LOCAL_MACHINE\Software\Realtek
HKEY_LOCAL_MACHINE\Software\REALTEK Semiconductor Corp.
HKEY_LOCAL_MACHINE\Software\Safer Networking Limited
HKEY_LOCAL_MACHINE\Software\Smart Projects
HKEY_LOCAL_MACHINE\Software\SRS Labs
HKEY_LOCAL_MACHINE\Software\Symantec
HKEY_LOCAL_MACHINE\Software\U-HE
HKEY_LOCAL_MACHINE\Software\VideoLAN
HKEY_LOCAL_MACHINE\Software\VideoProc Converter
HKEY_LOCAL_MACHINE\Software\VMware, Inc.
HKEY_LOCAL_MACHINE\Software\Volatile
HKEY_LOCAL_MACHINE\Software\WafCX
HKEY_LOCAL_MACHINE\Software\WebFoxBrowser
HKEY_LOCAL_MACHINE\Software\whc
HKEY_LOCAL_MACHINE\Software\WidsMob Technology Co., Limited
HKEY_LOCAL_MACHINE\Software\WiseCleaner
HKEY_LOCAL_MACHINE\Software\Wondershare
HKEY_LOCAL_MACHINE\Software\WOW6432Node
HKEY_LOCAL_MACHINE\Software\www.k-3d.org
HKEY_LOCAL_MACHINE\Software\X-AVCSD
HKEY_LOCAL_MACHINE\Software\xiberpix
HKEY_LOCAL_MACHINE\Software\XnView
HKEY_LOCAL_MACHINE\Software\ZONER
HKEY_LOCAL_MACHINE\Software\{71162BF7C2071D480629AF113CF0EB2D}
HKEY_LOCAL_MACHINE\Software\Classes
HKEY_LOCAL_MACHINE\Software\Clients
HKEY_LOCAL_MACHINE\Software\Policies
HKEY_LOCAL_MACHINE\Software\RegisteredApplications
========= Ende von CMD: =========
========= reg query "HKLM\Software" /reg:64 =========
HKEY_LOCAL_MACHINE\Software\1&1 Mail & Media GmbH
HKEY_LOCAL_MACHINE\Software\159cf4c3-37bc-5150-8b35-7d7bb00b81d5
HKEY_LOCAL_MACHINE\Software\1D0EC6DE-4A80-4CC3-A335-E6E41C951198
HKEY_LOCAL_MACHINE\Software\7-Zip
HKEY_LOCAL_MACHINE\Software\9ff685d9-8f1e-59e1-a273-b7c9e7cf0c17
HKEY_LOCAL_MACHINE\Software\a23b93d7-c27b-59d6-b1a0-6e4b0d5d056a
HKEY_LOCAL_MACHINE\Software\AbstractCurves
HKEY_LOCAL_MACHINE\Software\ActMask Virtual Printer SDK
HKEY_LOCAL_MACHINE\Software\Adobe
HKEY_LOCAL_MACHINE\Software\AE Protection
HKEY_LOCAL_MACHINE\Software\AKVIS
HKEY_LOCAL_MACHINE\Software\Ashampoo
HKEY_LOCAL_MACHINE\Software\ASIO
HKEY_LOCAL_MACHINE\Software\Audials
HKEY_LOCAL_MACHINE\Software\Autodesk
HKEY_LOCAL_MACHINE\Software\Avanquest
HKEY_LOCAL_MACHINE\Software\Avast Software
HKEY_LOCAL_MACHINE\Software\AVG
HKEY_LOCAL_MACHINE\Software\AVS4YOU
HKEY_LOCAL_MACHINE\Software\BlueStacksInstaller
HKEY_LOCAL_MACHINE\Software\BraveSoftware
HKEY_LOCAL_MACHINE\Software\Cakewalk Music Software
HKEY_LOCAL_MACHINE\Software\Canon
HKEY_LOCAL_MACHINE\Software\Classes
HKEY_LOCAL_MACHINE\Software\Clients
HKEY_LOCAL_MACHINE\Software\CPUID
HKEY_LOCAL_MACHINE\Software\CVSM
HKEY_LOCAL_MACHINE\Software\CyberLink
HKEY_LOCAL_MACHINE\Software\DefaultUserEnvironment
HKEY_LOCAL_MACHINE\Software\Dolby
HKEY_LOCAL_MACHINE\Software\dotnet
HKEY_LOCAL_MACHINE\Software\DoYourData
HKEY_LOCAL_MACHINE\Software\DTS
HKEY_LOCAL_MACHINE\Software\EPSON
HKEY_LOCAL_MACHINE\Software\EpsonNet
HKEY_LOCAL_MACHINE\Software\EqualizerAPO
HKEY_LOCAL_MACHINE\Software\Faceware
HKEY_LOCAL_MACHINE\Software\FLEXlm License Manager
HKEY_LOCAL_MACHINE\Software\Fortemedia
HKEY_LOCAL_MACHINE\Software\FreeCAD0211
HKEY_LOCAL_MACHINE\Software\FreeCAD102
HKEY_LOCAL_MACHINE\Software\GEAR Software
HKEY_LOCAL_MACHINE\Software\Google
HKEY_LOCAL_MACHINE\Software\HaaliMkx
HKEY_LOCAL_MACHINE\Software\Hewlett-Packard
HKEY_LOCAL_MACHINE\Software\inPixio Photo Studio 12
HKEY_LOCAL_MACHINE\Software\Intel
HKEY_LOCAL_MACHINE\Software\ISL
HKEY_LOCAL_MACHINE\Software\JavaSoft
HKEY_LOCAL_MACHINE\Software\JreMetrics
HKEY_LOCAL_MACHINE\Software\Khronos
HKEY_LOCAL_MACHINE\Software\Knowles
HKEY_LOCAL_MACHINE\Software\Krita
HKEY_LOCAL_MACHINE\Software\LibreOffice
HKEY_LOCAL_MACHINE\Software\Licenses
HKEY_LOCAL_MACHINE\Software\Lightkey
HKEY_LOCAL_MACHINE\Software\Logi
HKEY_LOCAL_MACHINE\Software\Logishrd
HKEY_LOCAL_MACHINE\Software\Logitech
HKEY_LOCAL_MACHINE\Software\Macrovision
HKEY_LOCAL_MACHINE\Software\MAGIX
HKEY_LOCAL_MACHINE\Software\Malwarebytes
HKEY_LOCAL_MACHINE\Software\Microsoft
HKEY_LOCAL_MACHINE\Software\Microsoft Research
HKEY_LOCAL_MACHINE\Software\Miray
HKEY_LOCAL_MACHINE\Software\Mozilla
HKEY_LOCAL_MACHINE\Software\MozillaPlugins
HKEY_LOCAL_MACHINE\Software\MuseHub
HKEY_LOCAL_MACHINE\Software\Nahimic
HKEY_LOCAL_MACHINE\Software\Native Instruments
HKEY_LOCAL_MACHINE\Software\NEW AUDIO TECHNOLOGY
HKEY_LOCAL_MACHINE\Software\Nuance
HKEY_LOCAL_MACHINE\Software\O&O
HKEY_LOCAL_MACHINE\Software\ODBC
HKEY_LOCAL_MACHINE\Software\OEM
HKEY_LOCAL_MACHINE\Software\Open Media LLC
HKEY_LOCAL_MACHINE\Software\Opera Software
HKEY_LOCAL_MACHINE\Software\Panasonic
HKEY_LOCAL_MACHINE\Software\PanoramaStudio2
HKEY_LOCAL_MACHINE\Software\PDF Architect 5
HKEY_LOCAL_MACHINE\Software\PDF24
HKEY_LOCAL_MACHINE\Software\Piriform
HKEY_LOCAL_MACHINE\Software\Policies
HKEY_LOCAL_MACHINE\Software\RapidSolution
HKEY_LOCAL_MACHINE\Software\Reallusion
HKEY_LOCAL_MACHINE\Software\Realtek
HKEY_LOCAL_MACHINE\Software\RegisteredApplications
HKEY_LOCAL_MACHINE\Software\Safer Networking Limited
HKEY_LOCAL_MACHINE\Software\Shotcut
HKEY_LOCAL_MACHINE\Software\Skylum
HKEY_LOCAL_MACHINE\Software\SonicFocus
HKEY_LOCAL_MACHINE\Software\SoundResearch
HKEY_LOCAL_MACHINE\Software\SRS Labs
HKEY_LOCAL_MACHINE\Software\Stepok
HKEY_LOCAL_MACHINE\Software\synfigstudio
HKEY_LOCAL_MACHINE\Software\the darktable project
HKEY_LOCAL_MACHINE\Software\The Document Foundation
HKEY_LOCAL_MACHINE\Software\TlntSPSvr
HKEY_LOCAL_MACHINE\Software\U-HE
HKEY_LOCAL_MACHINE\Software\VICABO GmbH
HKEY_LOCAL_MACHINE\Software\WebFoxBrowser
HKEY_LOCAL_MACHINE\Software\WIBU-SYSTEMS
HKEY_LOCAL_MACHINE\Software\WiseCleaner
HKEY_LOCAL_MACHINE\Software\WOW6432Node
HKEY_LOCAL_MACHINE\Software\ZONER
========= Ende von CMD: =========
========= sfc /scannow =========
Systemsuche wird gestartet. Dieser Vorgang kann einige Zeit dauern.
Überprüfungsphase der Systemsuche wird gestartet.
Überprüfung 0 % abgeschlossen.
Überprüfung 1 % abgeschlossen.
Überprüfung 1 % abgeschlossen.
Überprüfung 2 % abgeschlossen.
Überprüfung 2 % abgeschlossen.
Überprüfung 3 % abgeschlossen.
Überprüfung 3 % abgeschlossen.
Überprüfung 4 % abgeschlossen.
Überprüfung 5 % abgeschlossen.
Überprüfung 5 % abgeschlossen.
Überprüfung 6 % abgeschlossen.
Überprüfung 6 % abgeschlossen.
Überprüfung 7 % abgeschlossen.
Überprüfung 7 % abgeschlossen.
Überprüfung 8 % abgeschlossen.
Überprüfung 8 % abgeschlossen.
Überprüfung 9 % abgeschlossen.
Überprüfung 10 % abgeschlossen.
Überprüfung 10 % abgeschlossen.
Überprüfung 11 % abgeschlossen.
Überprüfung 11 % abgeschlossen.
Überprüfung 12 % abgeschlossen.
Überprüfung 12 % abgeschlossen.
Überprüfung 13 % abgeschlossen.
Überprüfung 14 % abgeschlossen.
Überprüfung 14 % abgeschlossen.
Überprüfung 15 % abgeschlossen.
Überprüfung 15 % abgeschlossen.
Überprüfung 16 % abgeschlossen.
Überprüfung 16 % abgeschlossen.
Überprüfung 17 % abgeschlossen.
Überprüfung 17 % abgeschlossen.
Überprüfung 18 % abgeschlossen.
Überprüfung 19 % abgeschlossen.
Überprüfung 19 % abgeschlossen.
Überprüfung 20 % abgeschlossen.
Überprüfung 20 % abgeschlossen.
Überprüfung 21 % abgeschlossen.
Überprüfung 21 % abgeschlossen.
Überprüfung 22 % abgeschlossen.
Überprüfung 23 % abgeschlossen.
Überprüfung 23 % abgeschlossen.
Überprüfung 24 % abgeschlossen.
Überprüfung 24 % abgeschlossen.
Überprüfung 25 % abgeschlossen.
Überprüfung 25 % abgeschlossen.
Überprüfung 26 % abgeschlossen.
Überprüfung 26 % abgeschlossen.
Überprüfung 27 % abgeschlossen.
Überprüfung 28 % abgeschlossen.
Überprüfung 28 % abgeschlossen.
Überprüfung 29 % abgeschlossen.
Überprüfung 29 % abgeschlossen.
Überprüfung 30 % abgeschlossen.
Überprüfung 30 % abgeschlossen.
Überprüfung 31 % abgeschlossen.
Überprüfung 32 % abgeschlossen.
Überprüfung 32 % abgeschlossen.
Überprüfung 33 % abgeschlossen.
Überprüfung 33 % abgeschlossen.
Überprüfung 34 % abgeschlossen.
Überprüfung 34 % abgeschlossen.
Überprüfung 35 % abgeschlossen.
Überprüfung 35 % abgeschlossen.
Überprüfung 36 % abgeschlossen.
Überprüfung 37 % abgeschlossen.
Überprüfung 37 % abgeschlossen.
Überprüfung 38 % abgeschlossen.
Überprüfung 38 % abgeschlossen.
Überprüfung 39 % abgeschlossen.
Überprüfung 39 % abgeschlossen.
Überprüfung 40 % abgeschlossen.
Überprüfung 41 % abgeschlossen.
Überprüfung 41 % abgeschlossen.
Überprüfung 42 % abgeschlossen.
Überprüfung 42 % abgeschlossen.
Überprüfung 43 % abgeschlossen.
Überprüfung 43 % abgeschlossen.
Überprüfung 44 % abgeschlossen.
Überprüfung 44 % abgeschlossen.
Überprüfung 45 % abgeschlossen.
Überprüfung 46 % abgeschlossen.
Überprüfung 46 % abgeschlossen.
Überprüfung 47 % abgeschlossen.
Überprüfung 47 % abgeschlossen.
Überprüfung 48 % abgeschlossen.
Überprüfung 48 % abgeschlossen.
Überprüfung 49 % abgeschlossen.
Überprüfung 50 % abgeschlossen.
Überprüfung 50 % abgeschlossen.
Überprüfung 51 % abgeschlossen.
Überprüfung 51 % abgeschlossen.
Überprüfung 52 % abgeschlossen.
Überprüfung 52 % abgeschlossen.
Überprüfung 53 % abgeschlossen.
Überprüfung 53 % abgeschlossen.
Überprüfung 54 % abgeschlossen.
Überprüfung 55 % abgeschlossen.
Überprüfung 55 % abgeschlossen.
Überprüfung 56 % abgeschlossen.
Überprüfung 56 % abgeschlossen.
Überprüfung 57 % abgeschlossen.
Überprüfung 57 % abgeschlossen.
Überprüfung 58 % abgeschlossen.
Überprüfung 59 % abgeschlossen.
Überprüfung 59 % abgeschlossen.
Überprüfung 60 % abgeschlossen.
Überprüfung 60 % abgeschlossen.
Überprüfung 61 % abgeschlossen.
Überprüfung 61 % abgeschlossen.
Überprüfung 62 % abgeschlossen.
Überprüfung 62 % abgeschlossen.
Überprüfung 63 % abgeschlossen.
Überprüfung 64 % abgeschlossen.
Überprüfung 64 % abgeschlossen.
Überprüfung 65 % abgeschlossen.
Überprüfung 65 % abgeschlossen.
Überprüfung 66 % abgeschlossen.
Überprüfung 66 % abgeschlossen.
Überprüfung 67 % abgeschlossen.
Überprüfung 68 % abgeschlossen.
Überprüfung 68 % abgeschlossen.
Überprüfung 69 % abgeschlossen.
Überprüfung 69 % abgeschlossen.
Überprüfung 70 % abgeschlossen.
Überprüfung 70 % abgeschlossen.
Überprüfung 71 % abgeschlossen.
Überprüfung 71 % abgeschlossen.
Überprüfung 72 % abgeschlossen.
Überprüfung 73 % abgeschlossen.
Überprüfung 73 % abgeschlossen.
Überprüfung 74 % abgeschlossen.
Überprüfung 74 % abgeschlossen.
Überprüfung 75 % abgeschlossen.
Überprüfung 75 % abgeschlossen.
Überprüfung 76 % abgeschlossen.
Überprüfung 77 % abgeschlossen.
Überprüfung 77 % abgeschlossen.
Überprüfung 78 % abgeschlossen.
Überprüfung 78 % abgeschlossen.
Überprüfung 79 % abgeschlossen.
Überprüfung 79 % abgeschlossen.
Überprüfung 80 % abgeschlossen.
Überprüfung 80 % abgeschlossen.
Überprüfung 81 % abgeschlossen.
Überprüfung 82 % abgeschlossen.
Überprüfung 82 % abgeschlossen.
Überprüfung 83 % abgeschlossen.
Überprüfung 83 % abgeschlossen.
Überprüfung 84 % abgeschlossen.
Überprüfung 84 % abgeschlossen.
Überprüfung 85 % abgeschlossen.
Überprüfung 86 % abgeschlossen.
Überprüfung 86 % abgeschlossen.
Überprüfung 87 % abgeschlossen.
Überprüfung 87 % abgeschlossen.
Überprüfung 88 % abgeschlossen.
Überprüfung 88 % abgeschlossen.
Überprüfung 89 % abgeschlossen.
Überprüfung 89 % abgeschlossen.
Überprüfung 90 % abgeschlossen.
Überprüfung 91 % abgeschlossen.
Überprüfung 91 % abgeschlossen.
Überprüfung 92 % abgeschlossen.
Überprüfung 92 % abgeschlossen.
Überprüfung 93 % abgeschlossen.
Überprüfung 93 % abgeschlossen.
Überprüfung 94 % abgeschlossen.
Überprüfung 95 % abgeschlossen.
Überprüfung 95 % abgeschlossen.
Überprüfung 96 % abgeschlossen.
Überprüfung 96 % abgeschlossen.
Überprüfung 97 % abgeschlossen.
Überprüfung 97 % abgeschlossen.
Überprüfung 98 % abgeschlossen.
Überprüfung 98 % abgeschlossen.
Überprüfung 99 % abgeschlossen.
Überprüfung 100 % abgeschlossen.
Der Windows-Ressourcenschutz hat keine Integritätsverletzungen gefunden.
========= Ende von CMD: =========
C:\Windows\System32\Drivers\etc\hosts => erfolgreich verschoben
Hosts erfolgreich wiederhergestellt.
========= RemoveProxy: =========
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1010\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\S-1-5-21-947909773-2885354443-2675781160-1010\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
========= Ende von RemoveProxy: =========
=========== EmptyEventLogs: ==========
1233 Event logs cleared.
================================
"C:\FRST\Quarantine" => erfolgreich entfernt
=========== EmptyTemp: ==========
FlushDNS => abgeschlossen
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 150421805 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 186739020 B
Edge => 0 B
Chrome => 20480 B
Firefox => 0 B
Opera => 10682792 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 1513 B
systemprofile32 => 1520168 B
LocalService => 1557624 B
NetworkService => 1566530 B
defaultuser0 => 1566530 B
Horst => 195306359 B
_ashbackuppb_ => 195313049 B
RecycleBin => 2657469433 B
EmptyTemp: => 3.2 GB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 19:43:49 ====
|
|
Gestern, 21:19
| #10 |
| /// TB-Ausbilder | Win 10 : WLAN-USB-Sticks nicht migriert - WLAN-Verbindung kann kurz etabliert werden, bricht dann wieder ab Guten Abend Jörg, die Logdatei von FRST sieht zufriedenstellend aus. Ich warte ab, was ESET liefert. |
|
| Themen zu Win 10 : WLAN-USB-Sticks nicht migriert - WLAN-Verbindung kann kurz etabliert werden, bricht dann wieder ab |
| antivir, avira, cursor, firefox, frage, google, homepage, installation, internet, internet explorer, mozilla, musik, netzwerk, nicht migriert, problem, prozesse, realtek, registry, rundll, server, services.exe, software, svchost.exe, system, updates, windows, wlan-usb |
Linear-Darstellung
